Unauthorized Configuration Changes via DDP Service

CVE-2023-37325

Summary

The D-Link DAP-2622 router contains a significant security oversight within its DDP service that permits unauthorized users to access and alter device configurations. This vulnerability stems from the absence of necessary authentication checks, enabling attackers situated on the same network to exploit this flaw. By doing so, they can manipulate critical settings, including wireless authentication parameters, posing serious risks to the integrity and security of the network. It is crucial for users of D-Link DAP-2622 devices to stay informed about this issue and take preventive actions to secure their configurations.

References