CVE-2018-10968

CRITICAL

D-Link DIR-550A/DIR-604M <v2.10KR - Privilege Escalation

Title source: llm
STIX 2.1

Description

On D-Link DIR-550A and DIR-604M devices through v2.10KR, a malicious user can use a default TELNET account to get unauthorized access to vulnerable devices, aka a backdoor access vulnerability.

References (1)

Core 1
Core References
Third Party Advisory x_refsource_misc
https://fortiguard.com/zeroday/FG-VD-18-061

Scores

CVSS v3 9.8
EPSS 0.0178
EPSS Percentile 75.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-1188
Status published
Products (2)
d-link/dir-550a_firmware < 2.10kr
d-link/dir-604m_firmware < 2.10kr
Published May 18, 2018
Tracked Since Feb 18, 2026