CVE-2026-42375 - Vulnerability Analysis

Overview

D-Link DIR-600L Hardware Revision A1 contains a hardcoded credentials vulnerability caused by a static telnet backdoor with fixed username and password, letting unauthenticated local attackers gain root shell access, exploit requires local network access.

Severity & Score

Impact

Unauthenticated local attackers can gain root shell access, leading to full administrative control of the device.

Mitigation

No patches available due to End-of-Life status; recommend replacing the device with a supported model.

References

• https://www.securin.io/zero-day/cve-2026-42375-hardcoded-telnet-backdoor-in-d-link-dir-600l-a1-end-of-life-

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner