CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-14422

D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices use the same hardcoded /etc/stunnel.key private key across different customers' installations, which allows remote attackers to defeat the HTTPS cryptographic protection mechanisms by leveraging knowledge of this key from another installation.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 61.1%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2017-14422

Dlink » Dir-850l » Version: N/A

cpe:2.3:h:dlink:dir-850l:-
Dlink » Dir-850l Firmware » Version: N/A

cpe:2.3:o:dlink:dir-850l_firmware:-
Dlink » Dir-850l Firmware » Version: 1.02

cpe:2.3:o:dlink:dir-850l_firmware:1.02
Dlink » Dir-850l Firmware » Version: 1.08b03

cpe:2.3:o:dlink:dir-850l_firmware:1.08b03
Dlink » Dir-850l Firmware » Version: 1.08trb03

cpe:2.3:o:dlink:dir-850l_firmware:1.08trb03
Dlink » Dir-850l Firmware » Version: 1.09

cpe:2.3:o:dlink:dir-850l_firmware:1.09
Dlink » Dir-850l Firmware » Version: 1.14b07

cpe:2.3:o:dlink:dir-850l_firmware:1.14b07
Dlink » Dir-850l Firmware » Version: 1.21b07

cpe:2.3:o:dlink:dir-850l_firmware:1.21b07
Dlink » Dir-850l Firmware » Version: 2.06

cpe:2.3:o:dlink:dir-850l_firmware:2.06
Dlink » Dir-850l Firmware » Version: 2.07.b05

cpe:2.3:o:dlink:dir-850l_firmware:2.07.b05
Dlink » Dir-850l Firmware » Version: 2.21b01

cpe:2.3:o:dlink:dir-850l_firmware:2.21b01
Dlink » Dir-850l Firmware » Version: 2.22b02

cpe:2.3:o:dlink:dir-850l_firmware:2.22b02
Dlink » Dir-850l Firmware » Version: fw114wwb07_h2ab

cpe:2.3:o:dlink:dir-850l_firmware:fw114wwb07_h2ab
Dlink » Dir-850l Firmware » Version: fw208wwb02

cpe:2.3:o:dlink:dir-850l_firmware:fw208wwb02

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-14422

Products

Pricing

Contact Us