PT-2019-11394

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.11 Description: The issue concerns the authorization process for goform requests, where the router only checks a random token. This token can be obtained from dir login.asp, allowing an attacker to use the "API URL...

CVE-2019-10042: Missing Authentication for Critical Function

The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dirlogin.asp and use an API URL /goform/LoadDefaultSettings to reset the router without authentication...