CVE-2016-10125

2017-01-0917:00:00

mitre

www.cve.org

8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.9%

JSON

D-Link DGS-1100 devices with Rev.B firmware 1.01.018 have a hardcoded SSL private key, which allows man-in-the-middle attackers to spoof devices by hijacking an HTTPS session.

References

www.securityfocus.com/bid/95329

labs.integrity.pt/advisories/dlink-dgs-1100-hardcoded-keys/