Critical severity9.8NVD Advisory· Published Sep 14, 2020· Updated Jun 17, 2026

CVE-2018-20432

Description

D-Link COVR-2600R and COVR-3902 Kit before 1.01b05Beta01 use hardcoded credentials for telnet connection, which allows unauthenticated attackers to gain privileged access to the router, and to extract sensitive data or modify the configuration.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dlink/Covr 2600r Firmware
cpe:2.3:o:dlink:covr-2600r_firmware:*:*:*:*:*:*:*:*
Range: <=1.01b05
Dlink/Covr 3902 Firmware
cpe:2.3:o:dlink:covr-3902_firmware:*:*:*:*:*:*:*:*
Range: <=1.01b05
D-Link/COVR-2600R and COVR-3902 Kitdescription
Dlink/COVR-3902 Kitllm-create
Range: <1.01b05Beta01
Dlink/COVR-3902llm-create
Range: <1.01b05Beta01
Dlink/COVR-2600Rllm-create
Range: <1.01b05Beta01

Patches

Vulnerability mechanics

References

supportannouncement.us.dlink.com/announcement/publication.aspxnvdPatchVendor Advisory
packetstormsecurity.com/files/159058/COVR-3902-1.01B0-Hardcoded-Credentials.htmlnvdExploitThird Party AdvisoryVDB Entry
cybersecurityworks.com/zerodays/cve-2018-20432-dlink.htmlnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000