CVE-2018-6210

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-06-19 · updated 2026-06-17
Weakness: CWE-798

Description

D-Link DIR-620 devices, with a certain Rostelekom variant of firmware 1.0.37, have a hardcoded rostel account, which makes it easier for remote attackers to obtain access via a TELNET session.

Affected products

Dlink Dir-620 Firmware: 1.0.37

References

https://securelist.com/backdoors-in-d-links-backyard/85530/
https://securelist.com/backdoors-in-d-links-backyard/85530/

Get alerted when CVE-2018-6210 or the next vulnerability affects your stack