CVE-2011-4723
D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability
Published Dec 20, 2011 · updated Jun 16, 2026 · dlink dir-300 firmware
The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Dec 20, 2011 · Catalog
Detected
The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.
Sep 8, 2022 · CISA KEV
Known exploited
The impacted product is end-of-life and should be disconnected if still in use.
Sep 29, 2022 · CISA KEV
Remediation due
The impacted product is end-of-life and should be disconnected if still in use.
Jun 16, 2026 · Catalog
Updated
The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.
Required action
The impacted product is end-of-life and should be disconnected if still in use.
CISA due date Sep 29, 2022
Affected
- cpe dlink/dir-300 firmwareversion unspecified
- vendor D-Link DIR-300 Routerversion unspecified
Sources
- CISA KEVConfirmed exploitationCVE-2011-4723
The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information.
cisa.gov - CVE.orgVulnerability recordCVE-2011-4723
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2011-4723
30-day exploitation probability 3.1%
first.org - NIST NVDVulnerability recordCVE-2011-4723
The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.
nvd.nist.gov