CVE-2019-9123

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices

published February 25, 2019

CVSS
—
EPSS
2%
Percentile
74.2
In the wild
Unconfirmed
What it is

⚠️ A blank password for the 'user' account on D-Link DIR-825 Rev.B 2.10 devices is a recipe for disaster! Think of it like leaving your front door wide open with a welcome mat that says, 'Please come in!' Anyone who knows this can stroll right into your network without breaking a sweat. This means that anyone within range could easily access the router, potentially altering settings, intercepting traffic, or even launching attacks on devices connected to your network. The risks are not just about unauthorized access but also about the privacy and security of all your connected devices!

Put simply

Think of it like leaving your front door wide open with a welcome mat that says, 'Please come in!' Anyone who knows this can stroll right into your network without breaking a sweat. The vulnerability is due to the 'user' account having no password, which allows an attacker to gain unauthorized access to the device’s administrative functions without any authentication.

What to do

This means that anyone within range could easily access the router, potentially altering settings, intercepting traffic, or even launching attacks on devices connected to your network. The risks are not just about unauthorized access but also about the privacy and security of all your connected devices! Change the default settings immediately to ensure that the 'user' account has a strong password. Regularly check for firmware updates from D-Link and apply them to stay protected. Don't forget to review your network settings for any unauthorized changes! You've got this! Take these actions, and you'll fortify your defenses in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01505 · 74.2th percentile
Published
2019-02-25T05:00Z
EPSS history
Timeline
  • 25 FEB 05:00Z
    An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices
    cvelistv5