CVE-2018-14081

An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices. Device passwords, such as the admin password and the WPA key, are stored in cleartext.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-10-09

Last modified

2024-08-05

Weaknesses

CWE-522

Affected products

• Dir-809 A1 Firmware (D-link)
• Dir-809 A2 Firmware (D-link)
• Dir-809 Guestzone Firmware (D-link)

References

• https://blog.nivel4.com/investigaciones/nuevas-vulnerabilidades-en-router-d-link-permiten-tomar-control-remoto-del-disp…