Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
D-Link DIR-605L Hardware Revision A1 (End-of-Life, EOL) contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the static password "wrgn35_dlwbr_dir605l" read from /etc/alpha_config/image_sign. The custom telnetd binary accepts a -u user:password flag, and the custom login binary uses strcmp() to validate credentials. Successful authentication grants an unauthenticated attacker on the local network a root shell with full administrative control. The device has reached End-of-Life (EOL) and will not receive patches.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
CVE-2026-42372 Hardcoded Telnet Backdoor in D-Link DIR-605L Hardware Revision A1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42372
Post summary
A new vulnerability, CVE‑2026‑42372, reveals a hardcoded Telnet backdoor in the D‑Link DIR‑605L Router, with no immediate evidence of exploitation or remediation.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | dlink | dir-605l | a1 | - | - |
| OS | dlink | dir-605l_firmware | - | - | - |