PT-2024-14372 · D Link · D-Link Covr 1100+2

Published 2024-04-03 · Updated 2024-09-06 · CVE-2023-52043

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link COVR 1100, 1102, 1103 AC1200 Dual-Band Whole-Home Mesh Wi-Fi System (Hardware Rev B1)

Description The issue truncates Wireless Access Point Passwords (WPA-PSK), allowing an attacker to gain unauthorized network access via weak authentication controls.

Recommendations For D-Link COVR 1100, 1102, 1103 AC1200 Dual-Band Whole-Home Mesh Wi-Fi System (Hardware Rev B1), consider changing the Wireless Access Point Passwords (WPA-PSK) to stronger passwords to minimize the risk of exploitation. As a temporary workaround, restrict access to the network until a patch or fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

CVE-2023-52043

Affected Products

D-Link Covr 1100

D-Link Covr 1102

D-Link Covr 1103

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2023-52043 · Security Note
• https://t.me/cvenotify/75667 · Telegram Post
• https://exploots.github.io/posts/2024/01/18/d-link-covr-1102-vulnerability.html · Note