CVE-2016-10125

Published: Jan 9, 2017Modified: May 6, 2026

8.1

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 5.9

Source: NVD

Description

D-Link DGS-1100 devices with Rev.B firmware 1.01.018 have a hardcoded SSL private key, which allows man-in-the-middle attackers to spoof devices by hijacking an HTTPS session.

Affected (1)

Products: Dlink: Dgs 1100 Firmware

Dlink

1 product

Dgs 1100 Firmware

Configuration A

1 vulnerable · 12 platform

Vulnerable Software	Affected Versions
Dlink Dgs 1100 Firmware	Version 1.01.018

Running on/with	Platform Versions
Dlink Dgs 1100 05	All versions
Dlink Dgs 1100 05pd	All versions
Dlink Dgs 1100 08	All versions
Dlink Dgs 1100 08p	All versions
Dlink Dgs 1100 10mp	All versions
Dlink Dgs 1100 10mpp	All versions
Dlink Dgs 1100 16	All versions
Dlink Dgs 1100 18	All versions
Dlink Dgs 1100 24	All versions
Dlink Dgs 1100 24p	All versions
Dlink Dgs 1100 26	All versions
Dlink Dgs 1100 26mp	All versions

Related CWEs

CWE-798

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (4)

http://www.securityfocus.com/bid/95329

Source: cve@mitre.org

https://labs.integrity.pt/advisories/dlink-dgs-1100-hardcoded-keys/

Source: cve@mitre.org

ExploitMitigationThird Party Advisory

http://www.securityfocus.com/bid/95329

Source: af854a3a-2127-422b-91ae-364da2661108

https://labs.integrity.pt/advisories/dlink-dgs-1100-hardcoded-keys/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitMitigationThird Party Advisory

Timeline

No history available yet.