Default credentials

2018-05-0403:29:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.3%

D-Link DIR-601 A1 1.02NA devices do not require the old password for a password change, which occurs in cleartext.

CPENameOperatorVersion
dir-601_firmwareeq1.2.0-na

CPE	Name	Operator	Version
	dir-601_firmware	eq	1.2.0-na

References

advancedpersistentsecurity.net/cve-2018-10641/

gist.github.com/jocephus/806ff4679cf54af130d69777a551f819

www.peerlyst.com/posts/vulnerability-disclosure-insecure-authentication-practices-in-d-link-router-cve-2018-10641-joe-gray