CVE-2018-20432 - D-Link COVR-2600R and COVR-3902 Kit before 1.01b05Beta01 use hardcoded credentials for telnet connection, which allows unauthenticated attackers to gain privileged access to the router, and to extract sensitive data or modify the configuration

Back Back to CVE browser

CRITICAL

D-Link COVR-2600R and COVR-3902 Kit before 1.01b05Beta01 use hardcoded credentials for telnet connection, which allows unauthenticated attackers to gain privileged access to the router, and to extract sensitive data or modify the configuration

Published Sep 14, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 3.93%

Description

D-Link COVR-2600R and COVR-3902 Kit before 1.01b05Beta01 use hardcoded credentials for telnet connection, which allows unauthenticated attackers to gain privileged access to the router, and to extract sensitive data or modify the configuration.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-798

Hard-coded Credentials

References (3)

http://packetstormsecurity.com/files/159058/COVR-3902-1.01B0-Hardcoded-Credentials.html
x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://cybersecurityworks.com/zerodays/cve-2018-20432-dlink.html
x_refsource_MISCExploitThird Party Advisory
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10109
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
http://packetstormsecurity.com/files/159058/COVR-3902-1.01B0-Hardcoded-Credentials.html		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://cybersecurityworks.com/zerodays/cve-2018-20432-dlink.html		x_refsource_MISCExploitThird Party Advisory
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10109		x_refsource_MISCPatchVendor Advisory