CVE-2026-42373 - Vulnerability Analysis

Overview

D-Link DIR-605L Hardware Revision B2 contains a hardcoded credentials vulnerability caused by a static telnet backdoor with fixed username and password, letting unauthenticated local attackers gain root shell access, exploit requires local network access.

Severity & Score

Impact

Unauthenticated local attackers can gain full root access, leading to complete device compromise and control.

Mitigation

Device is End-of-Life and will not receive patches; consider replacing with a supported device.

References

• https://www.securin.io/zero-day/cve-2026-42373-hardcoded-telnet-backdoor-in-d-link-dir-605l-b2-end-of-life-

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner