CVE-2018-17881: Weak Password Recovery Mechanism for Forgotten Password

On D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 SetPasswdSettings commands without authentication to trigger an admin password change...