CVE-2017-14427

High

Published: 13/09/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have improper 0666 permissions for /var/run/storage_account_root.

Risk Assessment

Improper permissions may allow unauthorized users to access sensitive data, posing a risk of information leakage or device takeover.

Recommendation

It is recommended to update the device firmware to the latest version to correct the permissions of /var/run/storage_account_root.

Other vulnerabilities in D-Link DIR-850L REV. A and REV. B

CVE-2017-14430High
D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices allow remote attackers to cause a denial of service (daemon crash) via crafted LAN traffic.

Original NVD description (English source)

D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0666 /var/run/storage_account_root permissions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS