CVE-2017-14427: High severity dlink dir-850l firmware vulnerability
D-Link DIR-850L REV. A (with firmware through FW114WWb07h2abbeta1) and REV. B (with firmware through FW208WWb02) devices have 0666 /var/run/storageaccountroot permissions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14427?
CVE-2017-14427 has a medium severity level due to improper permissions that can expose sensitive information.
How do I fix CVE-2017-14427?
To mitigate CVE-2017-14427, update the D-Link DIR-850L firmware to the latest version released after FW114WWb07_h2ab beta1 or FW208WWb02.
What devices are affected by CVE-2017-14427?
CVE-2017-14427 affects D-Link DIR-850L devices with firmware versions through FW114WWb07_h2ab beta1 and FW208WWb02.
What permissions issue is present in CVE-2017-14427?
CVE-2017-14427 involves 0666 permissions for the /var/run/storage_account_root directory, which may allow unauthorized access.
Is there a workaround for CVE-2017-14427?
A workaround for CVE-2017-14427 is to limit access to the device's administrative interface and ensure it is not exposed to the public internet.