CVE-2011-4723: D‑Link DIR‑300 Router Stores Passwords in Cleartext
What It Is — The DIR‑300 series router writes the administrator password to its configuration file in cleartext, creating a credential‑exposure flaw.
Exploitability — No public exploit code, but any attacker who can read the config (local console, compromised host, or remote file‑share) can retrieve the password. CVSS v3.1 base score 7.5 (High).
Affected Products — D‑Link DIR‑300 home/SMB routers (all firmware versions prior to the vendor’s 2012 patch).
Why It Matters for Trust & Control Assurance
- Credential protection control – Storing passwords unencrypted violates the control objective of safeguarding authentication secrets, a requirement across SOC 2, ISO 27001, NIST CSF, and others.
- Continuous configuration monitoring – The flaw is only visible through regular device‑configuration audits; without automated evidence collection, organizations cannot prove they remediate insecure settings.
- Defensible audit trail – Demonstrating that the vulnerability has been patched and that password storage is now encrypted provides concrete evidence for auditors and risk reviewers.
Recommended Actions
- Update firmware to the latest D‑Link release that removes cleartext storage.
- Reset all admin passwords to strong, unique values and verify they are stored encrypted.
- Deploy a configuration‑monitoring tool to flag any device that reverts to insecure settings.
- Document remediation (patch version, password change, monitoring rule) for audit readiness.
Source: CISA KEV – CVE‑2011‑4723