CVE-2012-6614: Critical severity d-link dsr-250n firmware vulnerability
D-Link DSR-250N devices before 1.08B31 allow remote authenticated users to obtain "persistent root access" via the BusyBox CLI, as demonstrated by overwriting the super user password.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2012-6614?
CVE-2012-6614 is a vulnerability that allows remote authenticated users to obtain persistent root access on D-Link DSR-250N devices before 1.08B31 by overwriting the super user password via the BusyBox CLI.
What is the severity of CVE-2012-6614?
The severity of CVE-2012-6614 is critical, with a CVSS score of 7.2 out of 10.
Which software versions are affected by CVE-2012-6614?
D-Link DSR-250N devices before version 1.08B31 are affected by CVE-2012-6614.
How can remote authenticated users exploit CVE-2012-6614?
Remote authenticated users can exploit CVE-2012-6614 by using the BusyBox CLI to overwrite the super user password on D-Link DSR-250N devices before 1.08B31.
Are all D-Link DSR-250N devices vulnerable to CVE-2012-6614?
No, only D-Link DSR-250N devices running firmware versions before 1.08B31 are vulnerable to CVE-2012-6614.