CVE-2017-12943

Critical

Published: 18/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

D-Link DIR-600 Rev Bx devices with v2.x firmware are vulnerable to a traversal attack that allows remote attackers to read passwords, including the admin password.

Risk Assessment

Attackers can gain access to sensitive information, potentially leading to device takeover and further attacks on the network.

Recommendation

It is recommended to update the firmware to the latest version and implement additional security measures to minimize the risk of attacks.

Original NVD description (English source)

D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/__show_info.php?REQUIRE_FILE= absolute path traversal attack, as demonstrated by discovering the admin password.