PT-2021-4492

CVE-2020-29323

·

Published

2021-06-04

·

Updated

2022-07-12

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions D-link router DIR-885L-MFC versions 1.15b02 through 1.21b05
Description The issue is related to insufficient protection of registration data in the telnet service of the D-link router DIR-885L-MFC, allowing an unauthenticated attacker to gain access to the firmware and extract sensitive data through decompilation of firmware.
Recommendations For versions 1.15b02 through 1.21b05, as a temporary workaround, consider disabling the telnet service until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾