CVE-2011-4723 D-Link DIR-300 Router Cleartext Storage of a Password

Exploited in the wild Medium 5.7 Published 20 Dec 2011 Updated 22 Oct 2025

Attackers can obtain sensitive information because the D-Link DIR-300 router stores passwords in cleartext.

Exploited in the wild: Since 8 Sep 2022
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2011-4723?

CVE-2011-4723 is a medium-severity vulnerability in n/a, published on 20 Dec 2011. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.

Weakness: CWE-312

Which versions are affected by CVE-2011-4723?

It affects 1 product.

Products include Dlink Dir-300 Firmware.

How do I fix CVE-2011-4723?

No fix has been published for CVE-2011-4723 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 29 Sep 2022.

Is CVE-2011-4723 being exploited?

Yes. Attackers have exploited CVE-2011-4723 in the wild since at least 8 Sep 2022.

Sources

Also known as GHSA-cqpf-hj5r-9893.