CVE-2017-14424 describes a vulnerability in D-Link DIR-850L REV. A and REV. B routers where the /var/passwd file has insecure 0666 permissions, allowing any local user to read and modify it. This flaw carries a CVSS v3.1 score of 7.8 (High), indicating a significant risk of complete compromise of confidentiality, integrity, and availability if a local attacker gains access. Despite its high severity, there is no public exploit code available, no evidence of active exploitation, and minimal community discussion or media coverage surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< fw114wwb07_h2abCPE matchmatch criteria | cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:* | ||
fw114wwb07_h2abCPE matchmatch criteria | cpe:2.3:o:dlink:dir-850l_firmware:fw114wwb07_h2ab:beta1:*:*:*:*:*:* | ||
<= fw208wwb02CPE matchmatch criteria | cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.