CVE-2017-14424

CVE-2017-14424 affects D-Link DIR-850L REV. A (firmware up to FW114WWb07_h2ab_beta1) and REV. B (up to FW208WWb02). The root cause is incorrect permissions on the file "/var/passwd" (0666), enabling local access to sensitive data. Public details describe the impact as high for confidentiality, in...