D-Link · DIR-300 Router
CVE-2011-4723
D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability
Exploited in attacks
Medium 5.7 Attack chance: 3.1%
What it is
The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.
CISA: The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information.
What to do
The impacted product is end-of-life and should be disconnected if still in use.
Deadline for US federal agencies: September 29, 2022
- Added to the CISA list
- September 8, 2022
- Published
- December 20, 2011
- Severity
- Medium 5.7 CVSS 3.1
- Chance of attacks in the next 30 days (EPSS)
- 3.1% in the top 12.5% of all known vulnerabilities
- Weakness
- CWE-310
- More details
- NVD · CVE.org · CISA
All references (1)
More exploited flaws from D-Link
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Apr 24, 2026 | Command Injection | DIR-823X | High 7.2 | 88% |
| Dec 8, 2025 | Buffer Overflow | Routers | Critical 9.8 | 56% |
| Aug 5, 2025 | Unspecified | DCS-2530L and DCS-2670L Devices | High 7.5 | 98% |
| Aug 5, 2025 | DCS-2530L and DCS-2670L Command Injection | DCS-2530L and DCS-2670L Devices | High 8.8 | 54% |
| Aug 5, 2025 | Download of Code Without Integrity Check | DNR-322L | High 8.8 | 34% |
| Jun 25, 2025 | D-Link DIR-859 Router Path Traversal | DIR-859 Router | Medium 5.3 | 83% |
| Sep 30, 2024 | OS Command Injection | DIR-820 Router | Critical 9.8 | 98% |
| May 16, 2024 | Information Disclosure | DIR-605 Router | High 7.5 | 87% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.