Hardcoded credentials

2017-01-0917:59:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.9%

JSON

D-Link DGS-1100 devices with Rev.B firmware 1.01.018 have a hardcoded SSL private key, which allows man-in-the-middle attackers to spoof devices by hijacking an HTTPS session.

CPENameOperatorVersion
dgs-1100_firmwareeq1.01.018

CPE	Name	Operator	Version
	dgs-1100_firmware	eq	1.01.018

References

www.securityfocus.com/bid/95329

labs.integrity.pt/advisories/dlink-dgs-1100-hardcoded-keys/