CVE-2011-4723

MEDIUM KEV

D-Link DIR-300 - Cleartext Storage of Sensitive Information

Title source: llm

Exploitation Summary

CVE-2011-4723 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added September 8, 2022.

Description

The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.

References (2)

Core 2

Core References

Third Party Advisory, US Government Resource

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-4723

Broken Link x_refsource_misc

http://en.securitylab.ru/lab/PT-2011-30

Scores

CVSS v3 5.7

EPSS 0.1405

EPSS Percentile 94.4%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation active

Automatable no

Technical Impact partial

Details

CISA KEV 2022-09-08

VulnCheck KEV 2018-07-13

ENISA EUVD EUVD-2011-4641

CWE

CWE-312

Status published

Products (2)

dlink/dir-300

dlink/dir-300_firmware

Published Dec 20, 2011

KEV Added Sep 08, 2022

Tracked Since Feb 18, 2026