Description
Certain models of D-Link wireless routers contain an undisclosed factory testing backdoor. Unauthenticated attackers on the local area network can force the device to enable Telnet service by accessing a specific URL and can log in by using the administrator credentials obtained from analyzing the firmware.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
D-Link G403
Default version status: unaffected
earlier to < 1.10.01affected
D-Link G415
Default version status: unaffected
earlier to < 1.10.01affected
D-Link G416
Default version status: unaffected
earlier to < 1.10.01affected
D-Link M18
Default version status: unaffected
earlier to < 1.10.01affected
D-Link R03
Default version status: unaffected
earlier to < 1.10.01affected
D-Link R04
Default version status: unaffected
earlier to < 1.10.01affected
D-Link R12
Default version status: unaffected
earlier to < 1.10.01affected
D-Link R18
Default version status: unaffected
earlier to < 1.10.01affected
D-Link E30
Default version status: unaffected
earlier to < 1.10.02affected
D-Link M30
Default version status: unaffected
earlier to < 1.10.02affected
D-Link M32
Default version status: unaffected
earlier to < 1.10.02affected
D-Link M60
Default version status: unaffected
earlier to < 1.10.02affected
D-Link R32
Default version status: unaffected
earlier to < 1.10.02affected
D-Link E15
Default version status: unaffected
earlier to < 1.20.01affected
D-Link R15
Default version status: unaffected
earlier to < 1.20.01affected