CVE-2019-7736

D-Link DIR-600M C1 3.04 devices allow authentication bypass via a direct request to the wan.htm page

published February 11, 2019

CVSS
—
EPSS
3%
Percentile
86.0
In the wild
Unconfirmed
What it is

⚡ An unguarded door to your D-Link DIR-600M might just swing wide open! A direct request to the wan.htm page can let attackers bypass authentication like it’s no big deal. 🔥 Think of your router as a hotel with a front desk, but someone has discovered a way to sneak in through a side entrance that nobody's watching. This vulnerability is that sneaky access point, allowing unauthorized guests to stroll right in. If exploited, an attacker could access sensitive settings or manipulate configurations without ever needing a keycard! This could mean unwanted changes to your network, potentially leading to data theft or even a complete takeover of your device.

Put simply

Think of your router as a hotel with a front desk, but someone has discovered a way to sneak in through a side entrance that nobody's watching. This vulnerability is that sneaky access point, allowing unauthorized guests to stroll right in. The vulnerability allows an attacker to bypass authentication by directly requesting the wan.htm page on D-Link DIR-600M C1 (version 3.04). This flaw can enable unauthorized administrative access without needing valid credentials.

What to do

If exploited, an attacker could access sensitive settings or manipulate configurations without ever needing a keycard! This could mean unwanted changes to your network, potentially leading to data theft or even a complete takeover of your device. To secure your device, ensure you update to the latest firmware version provided by D-Link. It’s also wise to regularly review your router settings and change any default credentials to something strong and unique. 🛡️ You’ve got this! Stay vigilant, follow these steps, and your network will be fortified in no time! 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02731 · 86.0th percentile
Published
2019-02-11T17:00Z
EPSS history
Timeline
  • 11 FEB 17:00Z
    D-Link DIR-600M C1 3.04 devices allow authentication bypass via a direct request to the wan.htm page
    cvelistv5