Executive Summary

This vulnerability exists in multiple D-Link devices, specifically in the function cgi_get_ipv6 within the file /cgi-bin/network_mgr.cgi. It causes improper access controls, meaning that unauthorized users might be able to access or manipulate certain functions or data that should be restricted.

The vulnerability affects a range of D-Link models up to the version 20260205, and the exploit for this vulnerability is publicly available.

Useful 0 Not Useful 0

Impact Analysis

Because this vulnerability leads to improper access controls, an attacker could potentially gain unauthorized access to network management functions on affected D-Link devices.

This could allow attackers to manipulate device settings or network configurations, potentially compromising network security or stability.

Useful 0 Not Useful 0