Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability

CVE-2023-44420

What is CVE-2023-44420?

The D-Link DIR-X3260 routers are affected by an authentication bypass vulnerability due to a flawed implementation of the authentication algorithm in the prog.cgi component. This flaw allows network-adjacent attackers to exploit the vulnerability without needing any prior authentication, potentially leading to unauthorized access to the affected device. Exploitation of this vulnerability could result in unauthorized control over the router and compromise the security of the network it supports. Users are urged to assess their configurations and implement defense measures to mitigate risks.

References