Threats tagged 'ghsa-32m9-2655-w25q'

A critical vulnerability exists in the D-Link DSL-6740C 20131126 device affecting the FTP Daemon component. The flaw involves hard-coded credentials in the /etc/templates/ftpd/ftpd_conf.php file, which can be exploited remotely without authentication. Public exploit code is available, increasing the risk of exploitation. The vulnerability has a maximum CVSS score of 10. No patch or remediation information is currently provided.