Vulnerabilities > CVE-2012-6614 - Missing Authorization vulnerability in D-Link Dsr-250N Firmware

047910
CVSS 9.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
SINGLE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
d-link
CWE-862
critical

Summary

D-Link DSR-250N devices before 1.08B31 allow remote authenticated users to obtain "persistent root access" via the BusyBox CLI, as demonstrated by overwriting the super user password.

Common Weakness Enumeration (CWE)