CVE-2011-4723VulnerabilityPublished 09/08/2022Updated 10/24/2026
CVE-2011-4723: D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability
Affects D-Link DIR-300 RouterSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 09/08/2022
- KEV deadline
- 09/29/2022
- EPSS
- 3.1% chance of exploitation in 30 days – higher than 87% of CVEs
What to do
CISA required action
The impacted product is end-of-life and should be disconnected if still in use.
Description
The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information.