D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability

CVE-2023-32169

Summary

An authentication bypass vulnerability exists in D-Link's D-View management software due to the use of a hard-coded cryptographic key within the TokenUtils class. This flaw enables remote attackers to bypass authentication mechanisms, allowing unauthorized access to affected systems without needing valid credentials. As a result, attackers can potentially manipulate system functions and gain sensitive information, posing significant security risks for enterprises relying on D-Link D-View. Users are urged to review their security settings and consider updates to mitigate risks associated with this vulnerability.

References