Command injection

2021-06-0420:15:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.3%

JSON

The D-Link router DIR-880L 1.07 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data.

CPENameOperatorVersion
dir-880l_firmwareeq1.07

CPE	Name	Operator	Version
	dir-880l_firmware	eq	1.07

References

cybersecurityworks.com/zerodays/cve-2020-29322-telnet-hardcoded-credentials.html