D-Link Nuclias Connect Observable Response Discrepancy Vulnerability in Forgot Password Endpoint

A vulnerability allowing account enumeration through observable response discrepancies has been identified in D-Link Nuclias Connect firmware versions through 1.3.1.4. The 'Forgot Password' endpoint responds differently based on whether the supplied email address is linked to an existing account. This variation, reflected in the 'data.exist' boolean value, enables an unauthenticated remote attacker to enumerate valid email addresses or accounts on the server.

Impact

Exploitation of this vulnerability allows for enumeration of valid email addresses or accounts on the server.

Remediation

D-Link has announced that a fix is under development. Users are advised to update to version 1.3.1.4 Beta, available through the D-Link Nuclias Connect support page.