CVE-2011-4723
Published 2011-12-20 · Updated 2026-06-16 · Source cve@mitre.org
Summary
CVE-2011-4723 is a medium-severity (CVSS 5.7) vulnerability in D-Link DIR-300 Router. CISA added it to the Known Exploited Vulnerabilities catalog on September 8, 2022, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by September 29, 2022. CISA does not currently list it as used in ransomware campaigns. D-Link has 26 vulnerabilities in the KEV catalog, 2 of them linked to ransomware.
All 26 known-exploited D-Link vulnerabilities →Description
The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.
CVSS vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CISA Known-Exploited Vulnerability
Product: D-Link — DIR-300 Router
Name: D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability
Date added: 2022-09-08 · Due: 2022-09-29
Required action: The impacted product is end-of-life and should be disconnected if still in use.