CVE-2020-24578

published 2020-12-22

CVE-2020-24578: An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. It has a misconfigured FTP service that allows a malicious…

medium 6.5 CVSS 3.1

AV A AC L PR N UI N S U C H I N A N

An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. It has a misconfigured FTP service that allows a malicious network user to access system folders and download sensitive files (such as the password hash file).

Affected

1 ranges

Vendor	Product	Version range	Fixed in
dlink	dsl2888a_firmware	< au_2.31_v1.1.47ae55	au_2.31_v1.1.47ae55

CWE-427 CWE-732