6 New Vulnerabilities Found on D-Link Home Routers
Summary: On February 28, 2020, Palo Alto Networks' Unit 42 researchers found six new vulnerabilities in D-Link DIR-865L home wireless cloud routers running the latest firmware, and noted some may also affect newer models that share a similar codebase. The flaws include command injection through cgibin.exe and scandir.sgi, cross-site request forgery, authentication bypass on the SharePort Web Access portal on port 8181, predictable session cookies seeded by login time, clear-text admin password storage in tools_admin.php, and clear-text guest Wi-Fi passwords when WEP is selected.
What you should know: Combined, these flaws let an attacker run arbitrary commands, exfiltrate data, upload malware, delete files, or steal credentials, and even HTTPS does not stop a sophisticated attacker because the session cookie is seeded with the login time. With so many people working from home, the home router is now the edge of the corporate network, and D-Link has released a patch that consumers are strongly recommended to install.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Endpoint & Network Security
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026