CVE-2017-3191
CriticalSummary
D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 are vulnerable to authentication bypass of the remote login page. A remote attacker that can access the remote management login page can manipulate the POST request in such a manner as to access some administrator-only pages such as tools_admin.asp without credentials.
Risk Assessment
This vulnerability may lead to unauthorized access to sensitive administrative functions, posing a serious security threat to the organization's network.
Recommendation
It is recommended to update the firmware to the latest version to mitigate this vulnerability and restrict access to the remote login page to trusted IP addresses.
Original NVD description (English source)
D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 are vulnerable to authentication bypass of the remote login page. A remote attacker that can access the remote management login page can manipulate the POST request in such a manner as to access some administrator-only pages such as tools_admin.asp without credentials.