CVE-2019-13560

D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to force a blank password via the applysec.cgi setupwizard parameter...

CVE-2019-13560

CVE-2019-13560 affects D-Link DIR-655 C devices prior to version 3.02B05 BETA03, where the vulnerable component is the setup_wizard parameter processed by apply_sec.cgi. The root cause is the ability for remote attackers to force a blank password, enabling unauthorized access through the device’s...