Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2021-39614: D-Link DVX-2000MS contains hard-coded credentials for undocumented user accounts in the '/etc/passwd' file. As weak passwords have been used, the plaintext passwords can be recovered from the hash ...
CVE-2021-39614 · published 5 years ago
Summary
D-Link DVX-2000MS contains hard-coded credentials for undocumented user accounts in the '/etc/passwd' file. As weak passwords have been used, the plaintext passwords can be recovered from the hash values.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| dlink | dvx-2000ms_firmware |
All versions
cpe:2.3:o:dlink:dvx-2000ms_firmware:-:*:*:*:*:*:*:* |
Original advisory text
D-Link DVX-2000MS contains hard-coded credentials for undocumented user accounts in the '/etc/passwd' file. As weak passwords have been used, the plaintext passwords can be recovered from the hash ...
D-Link DVX-2000MS contains hard-coded credentials for undocumented user accounts in the '/etc/passwd' file. As weak passwords have been used, the plaintext passwords can be recovered from the hash values.
References
- https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP1... Vendor Advisory
- https://www.dlink.com/en/security-bulletin/ Vendor Advisory
- https://www.nussko.com/advisories/advisory-2021-08-01.txt Exploit Third Party Advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Type
CWE-798Use of Hard-coded Credentials
Timeline
Published23 Aug 2021
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2021-39614 · NVD
Track software like this
Free during beta