CVE-2026-42372 - Vulnerability Analysis

Overview

D-Link DIR-605L Hardware Revision A1 contains a hardcoded credentials vulnerability caused by a static telnet backdoor with fixed username and password, letting unauthenticated local attackers gain root shell access, exploit requires local network access.

Severity & Score

Impact

Unauthenticated attackers on the local network can gain full root access, leading to complete device compromise.

Mitigation

Device is End-of-Life and will not receive patches; consider replacing with a supported model.

References

• https://www.securin.io/zero-day/cve-2026-42372-hardcoded-telnet-backdoor-in-d-link-dir-605l-a1-end-of-life-

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner