CVE-2018-10968

On D-Link DIR-550A and DIR-604M devices through v2.10KR, a malicious user can use a default TELNET account to get unauthorized access to vulnerable devices…

published May 18, 2018

CVSS
—
EPSS
2%
Percentile
77.7
In the wild
Unconfirmed
What it is

⚠️ A backdoor just waiting for a warm welcome! The D-Link DIR-550A and DIR-604M models have a default TELNET account that opens the door to unauthorized access. 🔓 Think of it like having a spare key hidden under the doormat of your house — anyone aware of its location can just waltz right in without permission! This vulnerability could allow a malicious user to stroll into your device and wreak havoc, potentially compromising sensitive information and hijacking network settings. Picture a neighbor turning off your Wi-Fi or tampering with your online security settings; that's the risk here!

Put simply

Think of it like having a spare key hidden under the doormat of your house — anyone aware of its location can just waltz right in without permission! This vulnerability stems from the existence of a default TELNET account on D-Link devices through v2.10KR, allowing unauthorized access to the device without any authentication barriers.

What to do

This vulnerability could allow a malicious user to stroll into your device and wreak havoc, potentially compromising sensitive information and hijacking network settings. Picture a neighbor turning off your Wi-Fi or tampering with your online security settings; that's the risk here! To mitigate this risk, immediately change the default TELNET account credentials, disable the TELNET service if not in use, and keep your firmware updated to the latest version. Regularly audit your network settings to ensure there are no vulnerabilities lurking! You've got this! By taking these steps, you'll keep your network in tip-top shape and protect your digital fortress. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01749 · 77.7th percentile
Published
2018-05-18T14:00Z
EPSS history
Timeline
  • 18 MAY 14:00Z
    On D-Link DIR-550A and DIR-604M devices through v2.10KR, a malicious user can use a default TELNET account to get unauthorized access to vulnerable devices…
    cvelistv5