CVE-2017-9542

Critical

Published: 11/06/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

D-Link DIR-615 Wireless N 300 Router allows authentication bypass via a modified POST request to login.cgi. This issue occurs because it fails to validate the password field.

Risk Assessment

Successful exploitation of this issue allows an attacker to take control of the affected device, potentially leading to serious security threats to the network.

Recommendation

It is recommended to update the router's firmware to the latest version and implement additional security measures to minimize risk.

Original NVD description (English source)

D-Link DIR-615 Wireless N 300 Router allows authentication bypass via a modified POST request to login.cgi. This issue occurs because it fails to validate the password field. Successful exploitation of this issue allows an attacker to take control of the affected device.