CVE-2017-14417

Critical

Published: 13/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The register_send.php file on D-Link DIR-850L REV. B devices (with firmware up to FW208WWb02) does not require authentication, which can lead to unintended enrollment in mydlink Cloud Services.

Risk Assessment

Lack of authentication may allow unauthorized users to access cloud services, posing a risk of data leakage or unauthorized device management.

Recommendation

It is recommended to update the firmware to the latest version and implement authentication mechanisms for access to the register_send.php file.

Original NVD description (English source)

register_send.php on D-Link DIR-850L REV. B (with firmware through FW208WWb02) devices does not require authentication, which can result in unintended enrollment in mydlink Cloud Services.