CVE-2017-14422

D-Link DIR-850L REV

published September 13, 2017

CVSS
—
EPSS
1%
Percentile
69.8
In the wild
Unconfirmed
What it is

D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices use the same hardcoded /etc/stunnel.key private key across different customers' installations, which allows remote attackers to defeat the HTTPS cryptographic protection mechanisms by leveraging knowledge of this key from another installation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01288 · 69.8th percentile
Published
2017-09-13T17:00Z
EPSS history
Timeline
  • 13 SEP 17:00Z
    D-Link DIR-850L REV
    cvelistv5