First published: Fri Jun 04 2021(Updated: )
The D-Link router DIR-868L 3.01 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data.
Credit: disclose@cybersecurityworks.com
Affected Software | Affected Version | How to fix |
---|---|---|
Dlink Dir-868l Firmware | =3.01 | |
Dlink Dir-868l |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID is CVE-2020-29321.
The severity of CVE-2020-29321 is high, with a severity value of 7.5.
CVE-2020-29321 affects the D-Link router DIR-868L firmware version 3.01.
An unauthenticated attacker can exploit CVE-2020-29321 by decompiling the firmware and gaining access to sensitive data through the telnet service.
Yes, the D-Link router DIR-868L firmware version 3.01 is vulnerable to CVE-2020-29321.
To mitigate CVE-2020-29321, it is recommended to update the router firmware to a non-vulnerable version and disable the telnet service.