VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Nov 11, 2019· Updated Jun 17, 2026

CVE-2019-18852

CVE-2019-18852

Description

Certain D-Link devices have a hardcoded Alphanetworks user account with TELNET access because of /etc/config/image_sign or /etc/alpha_config/image_sign. This affects DIR-600 B1 V2.01 for WW, DIR-890L A1 v1.03, DIR-615 J1 v100 (for DCN), DIR-645 A1 v1.03, DIR-815 A1 v1.01, DIR-823 A1 v1.01, and DIR-842 C1 v3.00.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • D-Link/DIR-600 B1 V2.01 for WW, DIR-890L A1 v1.03, DIR-615 J1 v100 (for DCN), DIR-645 A1 v1.03, DIR-815 A1 v1.01, DIR-823 A1 v1.01, and DIR-842 C1 v3.00description
  • Dlink/dir815llm-create
    Range: A1 v1.01
  • Dlink/DIR-842llm-create
    Range: C1 v3.00
  • Dlink/DIR-823llm-create
    Range: A1 v1.01
  • Dlink/Dir 615llm-create
    Range: J1 v100 (for DCN)
  • Dlink/Dir 645llm-create
    Range: A1 v1.03
  • Dlink/DIR-600llm-create
    Range: B1 V2.01 for WW
  • Dlink/DIR-890Lllm-create
    Range: A1 v1.03

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.