Dingtian DT-R0 Series Authentication Bypass Vulnerability

An authentication bypass vulnerability has been identified in the Dingtian DT-R0 Series, specifically in the DT-R002, DT-R008, DT-R016, and DT-R032 models. This vulnerability allows attackers to bypass login requirements by directly navigating to the main page, potentially leading to unauthorized modification of device settings and access to administrator privileges.

Impact

Exploitation of this vulnerability could allow an unauthenticated attacker to gain administrator access and modify device settings.

Remediation

Dingtian has not provided a response or mitigation for this vulnerability. Users of the affected DT-R0 Series models are encouraged to contact Dingtian customer support for more information. CISA recommends minimizing network exposure for control system devices, using firewalls to isolate control system networks from business networks, and employing secure remote access methods such as VPNs.