CVE-2017-14420

CVE-2017-14420 describes a vulnerability in the D-Link NPAPI extension affecting D-Link DIR-850L REV. A and REV. B routers. The flaw stems from the extension's failure to validate X.509 certificates from SSL servers, enabling man-in-the-middle (MITM) attackers to spoof legitimate servers. This medium-severity vulnerability (CVSS 5.9) has a network attack vector with high attack complexity, allowing attackers to obtain sensitive information without user interaction. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.