CVE-2022-37128

In D-Link DIR-816 A2v1.10CNB04.img the network can be initialized without authentication via /goform/wizardend...

CVE-2022-37128

In D-Link DIR-816 A2v1.10CNB04.img the network can be initialized without authentication via /goform/wizardend...

CVE-2022-37128

CVE-2022-37128 affects D-Link DIR-816 A2 with firmware image v1.10CNB04 (DIR-816 A2). The vulnerability allows initializing the network without authentication via the API endpoint "/goform/wizard_end". Impact is described as critical (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). No exploit det...