What’s Vulnerable › Vulnerabilities

CVE-2011-4723: D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: yes — in CISA KEV since 2022-09-08
• EPSS: 3.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-12-20 · updated 2026-06-16
• Weakness: CWE-312

Description

The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.

Affected products

• Dlink Dir-300 Firmware: all versions

References

• http://en.securitylab.ru/lab/PT-2011-30
• http://en.securitylab.ru/lab/PT-2011-30
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-4723

Get alerted when CVE-2011-4723 or the next vulnerability affects your stack