CVE-2013-6026

The web interface of various D-Link , Planex , and Alpha Networks routers is vulnerable to an authentication bypass due to a hardcoded backdoor. An unauthenticated remote attacker can bypass password requirements and modify device settings by including the specific User-Agent header string xmlset...

D-Link routers authenticate administrative access using specific User-Agent string

Overview Various D-Link routers allow administrative web actions if the HTTP request contains a specific User-Agent string. This backdoor allows an attacker to bypass password authentication and access the router's administrative web interface. Planex and Alpha Networks devices may also be...