CVE-2011-4723

5.7 mediumKEVEPSS 3.1%

Medium (5.7) in D-Link DIR-300 Router. In CISA KEV since 2022-09-08. EPSS 3.1% chance of exploitation in the next 30 days.

The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.

Severity

CVSS 3.1

5.7 medium

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 3.1% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CISA KEV: listed 2022-09-08, due 2022-09-29
CWE: CWE-312
Published: 2011-12-20
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

dlink:dir-300_firmware

References

http://en.securitylab.ru/lab/PT-2011-30
http://en.securitylab.ru/lab/PT-2011-30
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-4723

Check your stack JSON