CVE-2022-38557: D-Link Dir-845l Firmware

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

D-Link DIR845L v1.00-v1.03 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh.

Affected products

  • D-Link Dir-845l Firmware: from 1.0.0, up to and including 1.0.3

Published 2022-08-28. Last modified 2026-06-17.