Technical impact
The flaw resides in the console login component of D‑Link DIR‑850L (file /usr/sbin/consolepwd). An attacker who can manipulate the application locally can trigger the routine to reveal hard‑coded administrative credentials, giving full control over the device and the opportunity to reconfigure settings, intercept network traffic, or serve as a pivot point within the network. This weakness is identified as hard‑coded passwords (CWE‑259) and use of hard‑coded credentials (CWE‑798).
Affected Systems
Only the D‑Link DIR‑850L router running firmware FW1.20WWb03 is listed as impacted. No other firmware versions or models appear in the advisory, so administrators should focus on devices with this exact firmware build. The CPE string confirms the product scope, but no broader family impact is recorded.
Risk and Exploitability
With a CVSS score of 9.3 the vulnerability is classified as critical. The exploit has been published and is publicly available, demonstrating that an attacker who has local or network access to the console can obtain valid credentials immediately. The attack vector is local, implying the risk is limited to situations where an adversary can connect to the device physically or via local network access. Although the exploit is not listed in the CISA KEV catalog, the combination of a high severity score and public exploitation support gives the vulnerability a substantial threat profile.
