PT-2021-4491
CVE-2020-29321
·
Published
2021-06-04
·
Updated
2022-07-12
Description by
CVSS 2.0
7.8
HighMetricsAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions
D-Link DIR-868L version 3.01
Description
The issue concerns a credentials disclosure in the telnet service of the D-Link router DIR-868L. This is due to insufficient protection of registration data, which can be exploited through decompilation of the firmware. An unauthenticated attacker can gain access to the firmware and extract sensitive data.
Recommendations
For D-Link DIR-868L version 3.01, consider disabling the telnet service until a patch is available to prevent exploitation. Restrict access to the firmware to minimize the risk of sensitive data extraction. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾