CVE-2021-43474

An Access Control vulnerability exists in D-Link DIR-823G REVA1 1.02B05 (Lastest) via any parameter in the HNAP1 function

published April 7, 2022

CVSS
—
EPSS
3%
Percentile
87.8
In the wild
Unconfirmed
What it is

⚠️ An overlooked access control vulnerability lets anyone slip through the backdoor of your D-Link router! Think of it like a restaurant with a secret entrance that anyone can use to skip the line and access the kitchen — that’s the danger here. If someone knows about this sneaky entry, they can potentially mess with what’s cooking inside your network! This vulnerability could allow an unauthorized user to interact with sensitive features and settings of the router, putting your network at risk. Imagine someone fiddling with the menus behind the scenes — they could redirect your traffic or even access your private network resources.

Put simply

Think of it like a restaurant with a secret entrance that anyone can use to skip the line and access the kitchen — that’s the danger here. If someone knows about this sneaky entry, they can potentially mess with what’s cooking inside your network! The vulnerability lies in the HNAP1 function of the D-Link DIR-823G REVA1, where access control checks are improperly configured, allowing unauthorized access to parameters. This flaw could be exploited by sending crafted requests to the router without adequate authentication.

What to do

This vulnerability could allow an unauthorized user to interact with sensitive features and settings of the router, putting your network at risk. Imagine someone fiddling with the menus behind the scenes — they could redirect your traffic or even access your private network resources. To protect yourself, update your D-Link firmware to the latest version available, which may contain patches for this vulnerability. Additionally, review your router's settings and disable any unused services to minimize exposure. You’ve got this! Stay ahead of potential threats by taking these steps now and keep your network safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03126 · 87.8th percentile
Published
2022-04-07T21:02Z
EPSS history
Timeline
  • 07 APR 21:02Z
    An Access Control vulnerability exists in D-Link DIR-823G REVA1 1.02B05 (Lastest) via any parameter in the HNAP1 function
    cvelistv5