CVE-2018-14081: D-Link Dir-809 a1 Firmware

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices. Device passwords, such as the admin password and the WPA key, are stored in cleartext.

Affected products

• D-Link Dir-809 a1 Firmware: up to and including 1.09
• D-Link Dir-809 a2 Firmware: up to and including 1.11
• D-Link Dir-809 Guestzone Firmware: up to and including 1.09

Published 2018-10-09. Last modified 2026-06-17.