D-Link DIR-620 devices, with a certain Rostelekom variant of firmware 1.0.37, have a hardcoded rostel account, which makes it easier for remote attackers to obtain access via a TELNET session.
References
Link | Resource |
---|---|
https://securelist.com/backdoors-in-d-links-backyard/85530/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
No history.
Information
Published : 2018-06-19 19:29
Updated : 2024-02-28 16:25
NVD link : CVE-2018-6210
Mitre link : CVE-2018-6210
CVE.ORG link : CVE-2018-6210
JSON object : View
Products Affected
dlink
- dir-620_firmware
- dir-620
CWE
CWE-798
Use of Hard-coded Credentials