PT-2019-11392

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.11 Description: The issue concerns the authorization process of the router, where it only checks a random token when authorizing a goform request. This allows an attacker to obtain the token from dir login.asp and...

PT-2019-11391

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.11 Description: The issue allows an attacker to edit the web or system account without authentication by exploiting the fact that the router only checks the random token when authorizing a goform request. This toke...

PT-2019-11394

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.11 Description: The issue concerns the authorization process for goform requests, where the router only checks a random token. This token can be obtained from dir login.asp, allowing an attacker to use the "API URL...