CVE-2011-4723

dlink dir-300 firmware

Published 20 Dec 2011 · updated 16 Jun 2026 · Analyzed

5.7 Medium · CVSS 3.1, CISA ADP

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 8 Sept 2022, with a remediation deadline of 29 Sept 2022 for US federal agencies.

Required action: The impacted product is end-of-life and should be disconnected if still in use.

Description

The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.

References