CVE-2016-10177

An issue was discovered on the D-Link DWR-932B router

published January 30, 2017

CVSS
—
EPSS
7%
Percentile
94.2
In the wild
Unconfirmed
What it is

⚠️ Anyone with an internet connection and a basic knowledge of router passwords could easily access your D-Link DWR-932B—just like finding the front door keys under a doormat! 🥴 Think of your D-Link router as a cozy home, and the undocumented TELNET and SSH services as hidden entrances that anyone can use to walk right in. With the default passwords being 'admin' and '1234', it’s like leaving your front door wide open with a welcome sign! An attacker could exploit this issue to gain full access to your router settings, effectively taking control of your network. This means they could snoop on your internet traffic, change your network settings, or even plant malware—yikes! Protecting your network from unauthorized access is absolutely crucial.

Put simply

Think of your D-Link router as a cozy home, and the undocumented TELNET and SSH services as hidden entrances that anyone can use to walk right in. With the default passwords being 'admin' and '1234', it’s like leaving your front door wide open with a welcome sign! The D-Link DWR-932B router has undocumented TELNET and SSH services that allow login using widely known default credentials: 'admin' for admin access and '1234' for root access. This flaw leaves it vulnerable to unauthorized access and manipulation by anyone aware of these credentials.

What to do

An attacker could exploit this issue to gain full access to your router settings, effectively taking control of your network. This means they could snoop on your internet traffic, change your network settings, or even plant malware—yikes! Protecting your network from unauthorized access is absolutely crucial. Change the default passwords immediately to something strong and unique. If you don’t need TELNET or SSH, disable these services in your router settings. Regularly check for firmware updates to ensure you have the latest security patches. You've got this! With a couple of quick changes, you’ll lock down your network and keep those digital intruders at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07122 · 94.2th percentile
Published
2017-01-30T04:24Z
EPSS history
Timeline
  • 30 JAN 04:24Z
    An issue was discovered on the D-Link DWR-932B router
    cvelistv5