CVE-2022-38557

CWE-287 — Improper AuthenticationCWE-798 — Hard-coded Credentials3 documents3 sources
Severity
9.8CRITICAL
EPSS
0.7%
top 27.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Dlink Dir-845l Firmware
Timeline
PublishedAug 28
Latest updateAug 29

Description

D-Link DIR845L v1.00-v1.03 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

▶NVDdlink/dir-845l_firmware1.0.0 — 1.0.3

🔴Vulnerability Details

2
GHSA
GHSA-p8fm-6qr8-796r: D-Link DIR845L v1↗2022-08-29
▶
CVEList
CVE-2022-38557: D-Link DIR845L v1↗2022-08-28
▶
CVE-2022-38557 (CRITICAL CVSS 9.8) | D-Link DIR845L v1.00-v1.03 contains | cvebase.io