PT-2023-8386 · D Link · D-Link Dir-822

Published 2023-12-26 · Updated 2024-01-18 · CVE-2023-51989

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DIR-822+ version 1.0.2

Description The issue is related to a login bypass in the HNAP1 interface, which allows attackers to log in to administrator accounts with empty passwords. This is due to the lack of authentication for a critical function in the D-Link DIR-822 router's firmware. Exploitation of this issue may allow a remote attacker to enter administrator accounts with empty passwords.

Recommendations For D-Link DIR-822+ version 1.0.2, consider disabling the HNAP1 interface until a patch is available to prevent potential login bypass attacks. Restrict access to administrator accounts to minimize the risk of exploitation. Avoid using empty passwords for administrator accounts until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2024-00585

CVE-2023-51989

Affected Products

D-Link Dir-822

References · 6

• 🔥 https://github.com/funny-mud-peee/IoT-vuls/blob/main/dir822+/2/readme.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-51989 · Security Note
• https://bdu.fstec.ru/vul/2024-00585 · Security Note
• https://twitter.com/VulmonFeeds/status/1745502713406795931 · Twitter Post
• https://vuldb.com/de/?id.250456 · Note
• https://twitter.com/CVEnew/status/1745470552519692676 · Twitter Post