| Titolo | https://www.dlink.com/ M60 AX6000 Wi-Fi 6 Smart Mesh Router Firmware: V1.20B02 Translation Authentication Bypass + Encrypted Integrity Check By |
|---|
| Descrizione | The administrator password can be modified without the original admin password, solely through remote HTTP requests, and login verification with the new password can be successfully completed. This vulnerability does not rely on capturing passwords from the firmware environment or reading local secrets. |
|---|
| Fonte | ⚠️ https://www.yuque.com/iam0range/rle72q/dhs1zsbgtm1ne0y1 |
|---|
| Utente | iam0range (UID 97381) |
|---|
| Sottomissione | 15/04/2026 11:46 (4 mesi fa) |
|---|
| Moderazione | 30/04/2026 21:08 (15 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 360362 [D-Link M60 fino a 1.20B02 /usr/bin/httpd escalationi di privilegi] |
|---|
| Punti | 17 |
|---|