CVE-2020-29321: High severity d-link dir-868l firmware vulnerability

Published Jun 4, 2021

Updated

The D-Link router DIR-868L 3.01 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data.

Affected Software

2 affected components

Dlink Dir-868l Firmware=3.01

Dlink DIR-868L

Event History

Jun 4, 2021

CVE Published

via MITRE·07:40 PM

Data Sourced

via MITRE·07:40 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2020-29321.

What is the severity of CVE-2020-29321?

The severity of CVE-2020-29321 is high, with a severity value of 7.5.

How does CVE-2020-29321 affect the D-Link router DIR-868L?

CVE-2020-29321 affects the D-Link router DIR-868L firmware version 3.01.

How can an attacker exploit CVE-2020-29321?

An unauthenticated attacker can exploit CVE-2020-29321 by decompiling the firmware and gaining access to sensitive data through the telnet service.

Is the D-Link router DIR-868L vulnerable to CVE-2020-29321?

Yes, the D-Link router DIR-868L firmware version 3.01 is vulnerable to CVE-2020-29321.

How can I mitigate the vulnerability CVE-2020-29321?

To mitigate CVE-2020-29321, it is recommended to update the router firmware to a non-vulnerable version and disable the telnet service.