D-Link DIR-859 Router Authentication Bypass Vulnerability

CVE-2024-57045

Summary

A vulnerability exists in the D-Link DIR-859 router, where an attacker can bypass authentication mechanisms due to insufficient access controls. By sending a forged POST request to the /getcfg.php endpoint, unauthorized individuals can gain access to sensitive user credentials, including usernames and passwords. This flaw poses a significant risk for users, allowing potential intruders to exploit the router's configuration and compromise the network's security.

References