CVE-2017-14421

Critical

Published: 13/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

D-Link DIR-850L REV. B devices (with firmware through FW208WWb02) have a hardcoded password for the Alphanetworks account, allowing remote attackers to gain root access via a TELNET session upon device reset.

Risk Assessment

Attackers can remotely gain full access to the device, posing a serious threat to network security and user data.

Recommendation

It is recommended to change the password after resetting the device and to restrict access to the TELNET port or disable it.

Original NVD description (English source)

D-Link DIR-850L REV. B (with firmware through FW208WWb02) devices have a hardcoded password of wrgac25_dlink.2013gui_dir850l for the Alphanetworks account upon device reset, which allows remote attackers to obtain root access via a TELNET session.