CVE-2011-4723 The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.
MediumCVSS 6.8
EPSS 3.1%
CISA KEV
added 2022-09-08 · due 2022-09-29
Exploited in the wild
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.
CISA Known Exploited Vulnerability
- Date added
- 2022-09-08
- Due date (FCEB)
- 2022-09-29
- Ransomware use
- Unknown
Required action
The impacted product is end-of-life and should be disconnected if still in use.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dlink dir-300 firmware | All versions | No fix listed |
References
- en.securitylab.ru broken-link
- www.cisa.gov government-resource us-government-resource