Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-14422
HistorySep 13, 2017 - 5:29 p.m.

Hardcoded credentials

2017-09-1317:29:00
PRIOn knowledge base
www.prio-n.com
1

7.6 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.8%

D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices use the same hardcoded /etc/stunnel.key private key across different customers’ installations, which allows remote attackers to defeat the HTTPS cryptographic protection mechanisms by leveraging knowledge of this key from another installation.

7.6 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.8%

Related for PRION:CVE-2017-14422