← Back

CVE-2018-6213

nvd nist
Published: Jun 20, 2018Modified: Nov 21, 2024

JSON object

Loading...
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

In the web server on D-Link DIR-620 devices with a certain customized (by ISP) variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, and 2.0.22, there is a hardcoded password of anonymous for the admin account.

Affected (7)

D Link
1 product
Dir 620 Firmware
Configuration A
7 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
D Link
Dir 620 Firmware
Version 1.0.37
Dir 620 Firmware
Version 1.0.3
Dir 620 Firmware
Version 1.3.1
Dir 620 Firmware
Version 1.3.3
Dir 620 Firmware
Version 1.3.7
Dir 620 Firmware
Version 1.4.0
Dir 620 Firmware
Version 2.0.22
Running on/withPlatform Versions
Dlink
Dir 620
All versions

Related CWEs

CWE-798
Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.

References (8)

Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
ExploitThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.