CVE-2017-14418: High severity dlink dir-850l firmware vulnerability
The D-Link NPAPI extension, as used in conjunction with D-Link DIR-850L REV. B (with firmware through FW208WWb02) devices, sends the cleartext admin password over the Internet as part of interaction with mydlink Cloud Services.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14418?
CVE-2017-14418 is considered to be a high severity vulnerability due to the exposure of cleartext admin passwords over the Internet.
How do I fix CVE-2017-14418?
To mitigate CVE-2017-14418, update the D-Link DIR-850L router firmware to a version later than FW208WWb02.
Who is affected by CVE-2017-14418?
Users of the D-Link DIR-850L devices with firmware versions through FW208WWb02 are vulnerable to CVE-2017-14418.
What type of vulnerability is CVE-2017-14418?
CVE-2017-14418 is a security vulnerability related to insecure transmission of sensitive information.
What devices are impacted by CVE-2017-14418?
The D-Link DIR-850L devices equipped with the specified firmware version through FW208WWb02 are impacted by CVE-2017-14418.