CVE-2018-14081
CRITICALD-Link DIR-809 A1 < 1.09, A2 < 1.11, and Guest Zone < 1.09 - Insufficiently Protected Credentials
Title source: llmDescription
An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices. Device passwords, such as the admin password and the WPA key, are stored in cleartext.
References (1)
Core 1
Core References
Third Party Advisory x_refsource_misc
https://blog.nivel4.com/investigaciones/nuevas-vulnerabilidades-en-router-d-link-permiten-tomar-control-remoto-del-dispositivo/
Scores
CVSS v3
9.8
EPSS
0.0146
EPSS Percentile
70.1%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-522
Status
published
Products (3)
d-link/dir-809_a1_firmware
< 1.09
d-link/dir-809_a2_firmware
< 1.11
d-link/dir-809_guestzone_firmware
< 1.09
Published
Oct 09, 2018
Tracked Since
Feb 18, 2026