An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices. Device passwords, such as the admin password and the WPA key, are stored in cleartext.
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Dir-809_a1_firmware | D-link | * | 1.09 (including) |
| Dir-809_a2_firmware | D-link | * | 1.11 (including) |
| Dir-809_guestzone_firmware | D-link | * | 1.09 (including) |