CVE-2020-24578

An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55

published December 22, 2020

CVSS
—
EPSS
2%
Percentile
78.9
In the wild
Unconfirmed
What it is

An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. It has a misconfigured FTP service that allows a malicious network user to access system folders and download sensitive files (such as the password hash file).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01848 · 78.9th percentile
Published
2020-12-22T18:04Z
EPSS history
Timeline
  • 22 DEC 18:04Z
    An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55
    cvelistv5