Description
The D-Link router DIR-880L 1.07 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data.
References (1)
Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://cybersecurityworks.com/zerodays/cve-2020-29322-telnet-hardcoded-credentials.html
Scores
CVSS v3
7.5
EPSS
0.0059
EPSS Percentile
69.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-522
CWE-798
Status
published
Products (1)
dlink/dir-880l_firmware
1.07
Published
Jun 04, 2021
Tracked Since
Feb 18, 2026