CVE-2026-129445
Deferred Deferred - Pending Action

Hard-Coded Credentials in D-Link DIR-850L Firmware

Publication date: 2026-11-15

Last updated on: 2026-11-15

Assigner: VulDB

Description
A security flaw has been discovered in D-Link DIR-850L FW1.20WWb03. This impacts an unknown function of the file /usr/sbin/consolepwd of the component Console Login. Performing a manipulation results in hard-coded credentials. The attack requires a local approach. The exploit has been released to the public and may be used for attacks.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-15
Last Modified
2026-11-15
Generated
2026-11-15
AI Q&A
2026-11-15
EPSS Evaluated
N/A
NVD
CVE-2026-129445
EUVD
EUVD-2026-126011

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
d-link dir-850l 1.20

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-798 The product contains hard-coded credentials, such as a password or cryptographic key.
CWE-259 The product contains a hard-coded password, which it uses for its own inbound authentication or for outbound communication to external components.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves hard-coded credentials in the D-Link DIR-850L router firmware. The file /usr/sbin/consolepwd contains two hard-coded passwords: 'ws3cd' and 'new_home!secu6-aar'. These credentials bypass serial console authentication during boot, allowing unauthorized access even if the web administrator password is changed.

Detection Guidance

Check for the presence of the hard-coded credentials in the /usr/sbin/consolepwd binary by examining its strings or hashes. Compare the SHA-256 hash of the binary to ca2b65826fdf41647482ae3b9043193c27d669ba1bac7a296c4c876376b0b369.

Impact Analysis

An attacker with physical access to the router can exploit this flaw to gain unauthorized access via the serial console. This could lead to full control over the device, enabling network monitoring, data interception, or further attacks on connected systems.

Compliance Impact

This vulnerability may violate compliance requirements that mandate secure authentication mechanisms, such as GDPR (data protection) and HIPAA (health data security). Unauthorized access risks exposing sensitive data, leading to potential legal and regulatory penalties.

Mitigation Strategies

Update the firmware to a patched version if available. Disable or restrict access to the serial console interface. Change all default credentials, including the hard-coded ones if possible. Monitor network traffic for unauthorized access attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-129445. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...