Lucene search

K
cveMitreCVE-2024-41616
HistoryAug 06, 2024 - 4:15 p.m.

CVE-2024-41616

2024-08-0616:15:49
CWE-798
CWE-259
mitre
web.nvd.nist.gov
13
d-link
dir-300
firmware
hardcoded credentials
telnet service
security vulnerability

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

41.8%

D-Link DIR-300 REVA FIRMWARE v1.06B05_WW contains hardcoded credentials in the Telnet service.

Affected configurations

Nvd
Node
dlinkdir-300_firmwareMatch1.06b05_ww
AND
dlinkdir-300Matcha
VendorProductVersionCPE
dlinkdir-300_firmware1.06b05_wwcpe:2.3:o:dlink:dir-300_firmware:1.06b05_ww:*:*:*:*:*:*:*
dlinkdir-300acpe:2.3:h:dlink:dir-300:a:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

41.8%

Related for CVE-2024-41616