CVE-2022-38557

D-Link DIR845L v1.00-v1.03 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh

published August 28, 2022

CVSS
โ€”
EPSS
1%
Percentile
62.7
In the wild
Unconfirmed
What it is

โš ๏ธ A static default credential vulnerability lies in the D-Link DIR845L router, waiting for an unwary user! ๐Ÿ” Think of it like leaving your front door unlocked with a sign that says, 'Welcome! Free access!' Anyone passing by can waltz right in without a second thought. This vulnerability lets attackers gain unauthorized access using default credentials they never needed to guess! If exploited, an attacker could easily take control of your network โ€” think of them as uninvited guests rummaging through your belongings. They could alter settings, monitor traffic, and even launch attacks from your compromised router. The risk may not be immediate, but the potential for chaos is definitely there!

Put simply

Think of it like leaving your front door unlocked with a sign that says, 'Welcome! Free access!' Anyone passing by can waltz right in without a second thought. This vulnerability lets attackers gain unauthorized access using default credentials they never needed to guess! This vulnerability stems from the presence of static default credentials in the router firmware's startup script. Since these credentials are unchanged, they can be easily exploited by anyone familiar with the router model.

What to do

If exploited, an attacker could easily take control of your network โ€” think of them as uninvited guests rummaging through your belongings. They could alter settings, monitor traffic, and even launch attacks from your compromised router. The risk may not be immediate, but the potential for chaos is definitely there! Immediately change the default credentials on your D-Link DIR845L router to something strong and unique. Ensure you're running the latest firmware version to mitigate potential vulnerabilities. Regularly monitor your network for any unusual activity. You've got this! With these steps, your network will be as secure as a fortress! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01008 ยท 62.7th percentile
Published
2022-08-28T15:49Z
EPSS history
Timeline
  • 28 AUG 15:49Z
    D-Link DIR845L v1.00-v1.03 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh
    cvelistv5