CVE-2011-4723

medium · 5.7Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

The impacted product is end-of-life and should be disconnected if still in use.

Added 2022-09-08Remediation due 2022-09-29

The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.

5.7

CVSS

3.1%

EPSS (exploit prob.)

87th

EPSS percentile

2011-12-20

Published

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE-312

Affected products

Vendor	Product	Affected versions
dlink	dir-300_firmware	all versions
dlink	dir-300	all versions

Check a specific version with /api/v1/cve/match.

References

http://en.securitylab.ru/lab/PT-2011-30
http://en.securitylab.ru/lab/PT-2011-30
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-4723

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2011-4723