Dlink Dir-600 B1 Firmware vulnerabilities

2 known vulnerabilities affecting dlink/dir-600_b1_firmware.

Total CVEs

2

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

CRITICAL2

Vulnerabilities

Page 1 of 1

CVE-2019-18852CRITICALCVSS 9.8v2.012019-11-11

CVE-2019-18852 [CRITICAL] CWE-319 CVE-2019-18852: Certain D-Link devices have a hardcoded Alphanetworks user account with TELNET access because of /et Certain D-Link devices have a hardcoded Alphanetworks user account with TELNET access because of /etc/config/image_sign or /etc/alpha_config/image_sign. This affects DIR-600 B1 V2.01 for WW, DIR-890L A1 v1.03, DIR-615 J1 v100 (for DCN), DIR-645 A1 v1.03, DIR-815 A1 v1.01, DIR-823 A1 v1.01, and DIR-842 C1 v3.00.

CVE-2017-12943CRITICALCVSS 9.8PoCv2.012017-08-18

CVE-2017-12943 [CRITICAL] CWE-22 CVE-2017-12943: D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a mode D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/__show_info.php?REQUIRE_FILE= absolute path traversal attack, as demonstrated by discovering the admin password.