Administrator Credential Exposure in D-Link Routers

CVE-2017-3192

Summary

D-Link DIR-130 and DIR-330 routers have a security flaw in their firmware that allows for the exposure of administrator credentials due to insufficient protection. The tools_admin.asp page returns the administrator password in base64 encoding, which can be easily decoded by a remote attacker who gains access to the page. This vulnerability can potentially be exploited in conjunction with an authentication bypass, enabling unauthorized disclosure of sensitive information and administrative access to the device.

References