CVE-2017-14422

D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices use the same hardcoded /etc/stunnel.key private key across different customers' installations, which allows remote attackers to defeat the HTTPS cryptographic protection mechanisms by leveraging knowledge of this key from another installation.

CVSS v3 7.5 HIGH
CVSS v2.0 5.0 MEDIUM

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:dlink:dir-850l_firmware::::::::
	cpe:2.3:o:dlink:dir-850l_firmware:fw114wwb07_h2ab:beta1::::::

cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*

History

08 Nov 2023, 20:59

Type	Values Removed	Values Added
First Time		Dlink dir-850l Firmware
CPE	cpe:2.3:o:d-link:dir-850l_firmware:::::::: cpe:2.3:o:d-link:dir-850l_firmware::beta1::::::*	cpe:2.3:o:dlink:dir-850l_firmware:fw114wwb07_h2ab:beta1:::::: cpe:2.3:o:dlink:dir-850l_firmware::::::::

Information

Published : 2017-09-13 17:29

Updated : 2024-02-28 16:04

NVD link : CVE-2017-14422

Mitre link : CVE-2017-14422

CVE.ORG link : CVE-2017-14422

JSON object : View

Products Affected

dlink

dir-850l
dir-850l_firmware

CWE

CWE-798

Use of Hard-coded Credentials

{"id": "CVE-2017-14422", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2017-09-13T17:29:00.573", "references": [{"url": "https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-798"}]}], "descriptions": [{"lang": "en", "value": "D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices use the same hardcoded /etc/stunnel.key private key across different customers' installations, which allows remote attackers to defeat the HTTPS cryptographic protection mechanisms by leveraging knowledge of this key from another installation."}, {"lang": "es", "value": "Los dispositivos D-Link DIR-850L REV. A (con firmware hasta la versi\u00f3n FW114WWb07_h2ab_beta1) y REV. B (con firmware hasta la versi\u00f3n FW208WWb02) emplean la misma clave embebida /etc/stunnel.key a lo largo de instalaciones de diferentes clientes, lo que permite que atacantes remotos superen los mecanismos de protecci\u00f3n criptogr\u00e1fica HTTPS aprovechando el hecho de que conocen esta clave por otra instalaci\u00f3n."}], "lastModified": "2023-11-08T20:59:19.633", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A2C72E9-93AA-4670-B0B5-4016E442DFDB", "versionEndExcluding": "fw114wwb07_h2ab"}, {"criteria": "cpe:2.3:o:dlink:dir-850l_firmware:fw114wwb07_h2ab:beta1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E063822-8CED-46B3-BE66-7AD18F02FAC8"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "607DDB44-0E4E-4606-8909-B624345688D4"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD01AE08-1F0A-4004-8EC3-4887E540F349", "versionEndIncluding": "fw208wwb02"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "607DDB44-0E4E-4606-8909-B624345688D4"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}