CVE-2022-36524
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk50th percentile - higher than 50% of all known CVEs
Summary
The D-Link GO-RT-AC750 devices with firmware versions GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 contain static default credentials stored in the /etc/init0.d/S80telnetd.sh script. This allows unauthorized access to the Telnet service using default credentials.
Risk Assessment
An attacker can exploit the default login credentials to gain remote shell access to the device, leading to full compromise of the router and potential control over the network.
Recommendation
Immediately change the default Telnet password and consider disabling the Telnet service if not required. It is also recommended to update the firmware to the latest version if a patch is available from the vendor.
Other vulnerabilities in D-Link GO-RT-AC750
See all- CVE-2022-37055CriticalActively exploited
D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main.
- CVE-2022-36526High
D-Link GO-RT-AC750 routers with firmware versions GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to authentication bypass. The flaw resides in the phpcgi_main function within cgibin.
Original NVD description (English source)
D-Link GO-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Static Default Credentials via /etc/init0.d/S80telnetd.sh.