CVE-2013-6026

CVE-2013-6026 affects D-Link DIR-100/DIR-120/DI-624S/DI-524UP/DI-604S/DI-604UP/DI-604+ and TM-G5240 routers, plus Planex BRL-04R/BRL-04UR/BRL-04CW and likely Alpha Networks devices. The web server can bypass authentication and perform administrative actions when the HTTP User-Agent header contain...

D-Link routers authenticate administrative access using specific User-Agent string

Overview Various D-Link routers allow administrative web actions if the HTTP request contains a specific User-Agent string. This backdoor allows an attacker to bypass password authentication and access the router's administrative web interface. Planex and Alpha Networks devices may also be...