CVE-2018-6210: Critical severity D-Link DIR-620 vulnerability

Published Jun 19, 2018

Updated

D-Link DIR-620 devices, with a certain Rostelekom variant of firmware 1.0.37, have a hardcoded rostel account, which makes it easier for remote attackers to obtain access via a TELNET session.

Affected Software

11 affected components

D-Link DIR-620=1.0.3

D-Link DIR-620=1.0.37

D-Link DIR-620=1.3.1

D-Link DIR-620=1.3.3

D-Link DIR-620=1.3.7

D-Link DIR-620=1.4.0

D-Link DIR-620=2.0.22

Dlink Dir-620 Firmware=1.0.37

Dlink Dir-620

All of the following

Dlink Dir-620 Firmware=1.0.37

Dlink Dir-620

Event History

May 23, 2018

News Published

via BleepingComputer·01:11 PM

Jun 19, 2018

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Data Sourced

via NVD·07:29 PM

DescriptionSeverityWeaknessAffected Software

Aug 5, 2024

News Published

via BleepingComputer·06:06 AM

Peer vulnerabilities

Found alongside the following vulnerabilities.

CVE-2018-6213

Frequently Asked Questions

What is the severity of CVE-2018-6210?

CVE-2018-6210 is considered a high severity vulnerability due to the presence of a hardcoded account that allows unauthorized remote access.

How do I fix CVE-2018-6210?

To fix CVE-2018-6210, update the D-Link DIR-620 firmware to a version that does not include the hardcoded rostel account.

What devices are affected by CVE-2018-6210?

The D-Link DIR-620 devices running the Rostelekom variant of firmware version 1.0.37 are affected by CVE-2018-6210.

What type of attack is possible with CVE-2018-6210?

CVE-2018-6210 allows remote attackers to gain unauthorized access via a TELNET session due to the hardcoded account.

Is CVE-2018-6210 being actively exploited?

There have been reports suggesting that CVE-2018-6210 may be exploited by attackers to compromise vulnerable devices.