CVE-2017-7406 | BDVDB-2026-87406 Detail

Description#

The D-Link DIR-615 device before v20.12PTb04 doesn't use SSL for any of the authenticated pages. Also, it doesn't allow the user to generate his own SSL Certificate. An attacker can simply monitor network traffic to steal a user's credentials and/or credentials of users being added while sniffing the traffic.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.qualys.com/2017/03/12/qsa-2017-03-12/qsa-2017-03-12.pdf

Exploit#

No public exploit known

History#

Version 12017-07-07Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.