Lucene search

CSWCVE-2020-29323

HistoryJun 04, 2021 - 8:15 p.m.

CVE-2020-29323

2021-06-0420:15:07

CWE-798

CWE-522

CSW

web.nvd.nist.gov

cve-2020-29323

d-link

router

credentials disclosure

telnet

firmware decompilation

vulnerability

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.6

Confidence

High

EPSS

0.005

Percentile

75.2%

JSON

The D-link router DIR-885L-MFC 1.15b02, v1.21b05 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data.

Affected configurations

Nvd

Node

dlinkdir-885l-mfc_firmwareMatch1.15b02

dlinkdir-885l-mfc_firmwareMatch1.21b05

AND

dlinkdir-885l-mfcMatch-

VendorProductVersionCPE
dlinkdir-885l-mfc_firmware1.15b02cpe:2.3:o:dlink:dir-885l-mfc_firmware:1.15b02:*:*:*:*:*:*:*
dlinkdir-885l-mfc_firmware1.21b05cpe:2.3:o:dlink:dir-885l-mfc_firmware:1.21b05:*:*:*:*:*:*:*
dlinkdir-885l-mfc-cpe:2.3:h:dlink:dir-885l-mfc:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dlink	dir-885l-mfc_firmware	1.15b02	cpe:2.3:o:dlink:dir-885l-mfc_firmware:1.15b02:::::::*
dlink	dir-885l-mfc_firmware	1.21b05	cpe:2.3:o:dlink:dir-885l-mfc_firmware:1.21b05:::::::*
dlink	dir-885l-mfc	-	cpe:2.3:h:dlink:dir-885l-mfc:-:::::::*

CNA Affected

[
  {
    "product": "D-Link Router DIR-885L-MFC",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "1.15b02,v1.21b05"
      }
    ]
  }
]

References

cybersecurityworks.com/zerodays/cve-2020-29323-telnet-hardcoded-credentials.html

Social References

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.6

Confidence

High

EPSS

0.005

Percentile

75.2%

JSON

Related for CVE-2020-29323