Brute-Force Protection Bypass in DWM-222W USB Wi-Fi Adapter by D-Link
CVE-2026-6947

8.7HIGH

Key Information:

Vendor

D-link
Status
Dwm-222w
Vendor
CVE Published:
24 April 2026

What is CVE-2026-6947?

The DWM-222W USB Wi-Fi Adapter from D-Link is susceptible to a vulnerability that allows attackers within close proximity to exploit the device's login attempt restrictions. This flaw enables unauthorized individuals to conduct brute-force attacks without being restricted by the normal safeguards, potentially compromising the device and the network it connects to. It underscores the importance of implementing robust security measures to prevent unauthorized access.

Affected Version(s)

DWM-222W 0 < 1.02.00

References

https://www.twcert.org.tw/tw/cp-132-10864-944b1-1.html
third-party-advisory
https://www.twcert.org.tw/en/cp-139-10865-de323-2.html
third-party-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.