NetSight
medium5.7Known exploited

CVE-2011-4723

D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-09-08. Federal due date: 2022-09-29.

The impacted product is end-of-life and should be disconnected if still in use.

Impact

The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.

Affected products

VendorProductAffected versions
DlinkDir-300 Firmware
All versions

Weakness classification

References