CVE-2017-14418

Name of the Vulnerable Software and Affected Versions D-Link DIR-850L REV. B versions through FW208WWb02

Description The issue concerns the transmission of the admin password in cleartext over the Internet when the D-Link NPAPI extension interacts with mydlink Cloud Services.

Recommendations For D-Link DIR-850L REV. B versions through FW208WWb02, consider changing the admin password regularly and avoid using the same password across multiple devices until a fix is available. As a temporary workaround, restrict access to mydlink Cloud Services to minimize the risk of exploitation.