CVE Catalog

CVE-2017-11436

Critical
Published: Translated: NVD NIST

Summary

D-Link DIR-615 before v20.12PTb04 has a second admin account with a BACKDOOR value of 0x1, which might allow remote attackers to gain access via a TELNET connection.

Risk Assessment

The presence of a hidden admin account poses a serious security risk, allowing unauthorized users to access the device.

Recommendation

It is recommended to update the router to the latest version to remove this account and disable TELNET access.

Original NVD description (English source)

D-Link DIR-615 before v20.12PTb04 has a second admin account with a 0x1 BACKDOOR value, which might allow remote attackers to obtain access via a TELNET connection.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS