Volerion logoVolerion
Volerion logoVolerion

D-Link DIR-816 Access Control Vulnerability in Repeater Service Configuration

Vulnerability

An access control vulnerability has been identified in the D-Link DIR-816 router, specifically in the firmware version 816A2_FWv1.10CNB05_R1B011D88210. This vulnerability allows unauthenticated attackers to manipulate the 2.4G and 5G repeater services of the device by sending a crafted POST request.

Impact

Exploitation of this vulnerability allows for unauthorized modification of the device's repeater service settings.

Reproduction

To reproduce this vulnerability, send a POST request to the 'form2RepeaterSetup.cgi' component of the D-Link DIR-816 router running the vulnerable firmware. The request must be crafted to include the desired changes to the 2.4G and 5G repeater services.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
4.5
impact
0.6
exploitability
9.1
remediation
0.0
relevance
0.0
threat
6.4
urgency
2.9
incentive
9.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.