VULNERABILITY INTELLIGENCE
CVE-2020-29323
CVSS score7.5 HIGH
EPSS probability1.41%
CISA KEVNot currently listed
Published2021-06-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
The D-link router DIR-885L-MFC 1.15b02, v1.21b05 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data.
Weakness classification
- CWE-522: Insufficiently Protected Credentials
- CWE-798: Use of Hard-coded Credentials
Primary references
- disclose@cybersecurityworks.com — Exploit, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory