CVE-2012-6614

2020-02-1914:17:39

mitre

www.cve.org

6.7 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

79.7%

JSON

D-Link DSR-250N devices before 1.08B31 allow remote authenticated users to obtain “persistent root access” via the BusyBox CLI, as demonstrated by overwriting the super user password.

References

ftp://ftp2.dlink.com/PRODUCTS/DSR-250N/REVA/DSR-SERIES_RELEASE_NOTES_v3.14.pdf

www.exploit-db.com/exploits/22930/

packetstormsecurity.com/files/118355/D-Link-DSR-250N-Backdoor.html