Weak Default Password Vulnerability in Dlink DWR-X1820 Router

CVE-2026-4377

What is CVE-2026-4377?

The Dlink DWR-X1820 router is susceptible to security risks due to its use of weak default passwords generated from the device's IMEI number. This design flaw allows an attacker who knows how the default passwords are formulated to easily exploit the vulnerability, especially if they have access to the IMEI number. Users are not prompted to change this default password, which increases the device's susceptibility to unauthorized access. A fix was implemented in version 1.00B16CP to address this concern.

References