D-Link Administrative Password Disclosure

The problem in the following models :

DIR-652
DIR-615
DIR-827
DIR-615
DIR-657
DIR-825

If login to web interface as "User" or The problem in the following models :

DIR-652
DIR-615
DIR-827
DIR-615
DIR-657
DIR-825

If login to web interface as "User" or "user" , and navigate to url :

http://<ip>:port/wizard_wan.asp

in web code page:

view-source:<ip>:port/wizard_wan.asp

scroll down page and bang :

administrator password in plain text

ports : 8080 or 8081 .


---
Ta wiadomość została sprawdzona na obecność wirusów przez oprogramowanie antywirusowe Avast.
https://www.avast.com/antivirus