CVE-2011-4723
D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability
Published Dec 20, 2011 · updated Jun 16, 2026 · dlink dir-300 firmware
The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.
Timeline
Detection, updates, and resolution for this record.
Dec 20, 2011 · Catalog
Detected
The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.
Sep 8, 2022 · CISA KEV
Known exploited
The impacted product is end-of-life and should be disconnected if still in use.
Sep 29, 2022 · CISA KEV
Remediation due
The impacted product is end-of-life and should be disconnected if still in use.
Jun 16, 2026 · Catalog
Updated
The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.
Required action
The impacted product is end-of-life and should be disconnected if still in use.
CISA due date Sep 29, 2022
Affected
- cpe dlink/dir-300 firmwareversion unspecified
- vendor D-Link DIR-300 Routerversion unspecified
Sources
- CISA KEVCVE-2011-4723
The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information.
cisa.gov - CVE.orgCVE-2011-4723
Official CVE identifier
cve.org - FIRST EPSSCVE-2011-4723
30-day exploitation probability 3.1%
first.org - NIST NVDCVE-2011-4723
The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.
nvd.nist.gov