Authentication Bypass Vulnerability in D-Link DIR-1935 Routers

CVE-2022-43620

Summary

A critical vulnerability exists in D-Link DIR-1935 routers due to insufficient authentication handling in HNAP login requests. Network-adjacent attackers can exploit this flaw without needing to authenticate themselves, thereby gaining unauthorized access to the router's settings. This oversight in the implementation of the authentication algorithm allows for seamless exploitation, making it imperative for users to monitor and secure their devices against potential attacks.

References