CVE-2021-31326: Improper Authentication

D-Link DIR-816 A2 1.10 B05 allows unauthenticated attackers to arbitrarily reset the device via a crafted tokenid parameter to /goform/form2Reboot.cgi...

PT-2022-10033

Name of the Vulnerable Software and Affected Versions D-Link DIR-816 A2 version 1.10 B05 Description The issue allows unauthenticated attackers to arbitrarily reset the device. This can be achieved by sending a crafted tokenid parameter to the "/goform/form2Reboot.cgi" API endpoint. Recommendatio...