D-Link DSL-7740C Insecure Default Credentials Vulnerability

A vulnerability exists in the D-Link DSL-7740C modem running firmware version DSL7740C.V6.TR069.20211230, due to insecure default credentials for the Administrator account. This flaw allows attackers to escalate privileges by executing a brute-force attack. The default credentials are predictable and based on the device's MAC address, enabling unauthorized remote access to the modem's control panel.

Impact

Exploitation of this vulnerability could lead to unauthorized administrative access on the affected modem, allowing attackers to make configuration changes, disrupt service, intercept sensitive data, or use the compromised device as a foothold for further attacks on the local network.