This host is running D-Link Dsl Router and is prone to multiple authentication bypass vulnerabilities.

Successful exploitation will allow attacker to retrieve the administrator password and then access the device with full privileges. This will allow an attacker to launch further attacks. Impact Level: Application

No solution or patch was made available for at least one year since disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one.

The web interface of Dsl Router routers expose several pages accessible with no authentication. These pages can be abused to access sensitive information concerning the device configuration, including the clear-text password for the administrative user.

D-Link Dsl Router BZ_1.06

• http://1337day.com/exploit/20789
• http://w00t.pro/2013/05/19/17033

---

Updated on 2017-03-28