A vulnerability was detected in D-Link E15, M32, R15 and R32.
A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /etc/emDaemon/passwd of the component MQTT Broker. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. The exploit is now public and may be used.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- D-Link
- CVSS
- 7.4
Why it ranks 10 (Routine)
- CVSS 7.4 high
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.