CVE-2019-18852 Hardcoded credentials in n/a

Critical 9.8 Published 11 Nov 2019 Updated 5 Aug 2024

Attackers can gain unauthorized TELNET access to D-Link routers using hardcoded credentials, leading to full device compromise.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2019-18852?

CVE-2019-18852 is a critical vulnerability in n/a, published on 11 Nov 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Certain D-Link devices have a hardcoded Alphanetworks user account with TELNET access because of /etc/config/image_sign or /etc/alpha_config/image_sign. This affects DIR-600 B1 V2.01 for WW, DIR-890L A1 v1.03, DIR-615 J1 v100 (for DCN), DIR-645 A1 v1.03, DIR-815 A1 v1.01, DIR-823 A1 v1.01, and DIR-842 C1 v3.00.

Weakness: CWE-319

Which versions are affected by CVE-2019-18852?

It affects 7 products.

Products include Dlink Dir-600 B1 Firmware, Dlink Dir-615 J1 Firmware, Dlink Dir-645 A1 Firmware, Dlink Dir-815 A1 Firmware, Dlink Dir-823 A1 Firmware, Dlink Dir-842 C1 Firmware and 1 more.

How do I fix CVE-2019-18852?

No fix has been published for CVE-2019-18852 yet. Limit exposure of the affected software until one is available.

Is CVE-2019-18852 being exploited?

There is no known exploitation of CVE-2019-18852 in the wild and no public exploit code.

CVE-2017-12943 Path traversal in n/a Critical 9.8

Sources

Also known as GHSA-mpx6-w79q-h86g.