CVE Daily

CVE-2020-24578

An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2...

Medium CVSS 6.5

Overview

An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. It has a misconfigured FTP service that allows a malicious network user to access system folders and download sensitive files (such as the password hash file).

CWE: CWE-427 Published: 2020-12-22T19:15:13.190
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 6.5 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags