CVE Catalog
CVE-2014-7858
CriticalSummary
The check_login function in D-Link DNR-326 before version 2.10 build 03 allows remote attackers to bypass authentication and log in by setting the username cookie parameter to an arbitrary string.
Risk Assessment
Attackers can gain access to the system without proper authorization, potentially leading to unauthorized access to data and device functions.
Recommendation
It is recommended to update the firmware to the latest version to mitigate this vulnerability.
Original NVD description (English source)
The check_login function in D-Link DNR-326 before 2.10 build 03 allows remote attackers to bypass authentication and log in by setting the username cookie parameter to an arbitrary string.