D-Link DIR-816 Access Control Vulnerability in AGL Service

An access control vulnerability has been identified in the D-Link DIR-816 router, specifically in the component form2alg.cgi. This vulnerability allows unauthenticated attackers to manipulate the AGL service of the device by sending a crafted POST request.

Impact

Exploitation of this vulnerability could lead to unauthorized changes to the AGL service on the affected device.

Reproduction

To reproduce this vulnerability, send a POST request to the form2alg.cgi component of the D-Link DIR-816 router. The request must be crafted to manipulate the AGL service, taking advantage of the lack of authentication checks.