D-Link DI-7003GV2 Denial-of-Service Vulnerability via Authentication Bypass

An authentication bypass vulnerability has been identified in the D-Link DI-7003GV2 router, specifically in the firmware version 24.04.18D1 R(68125). This vulnerability allows remote attackers to access the /H5/restart.asp page without authentication, leading to a denial-of-service condition by forcing the device to restart. The issue has been publicly disclosed and is available as a proof-of-concept exploit.

Impact

Exploitation of this vulnerability causes the device to reboot, disrupting service and temporarily denying access until the restart is complete.

Reproduction

The vulnerability can be reproduced by sending a crafted HTTP request to the /H5/restart.asp endpoint. This can be automated with the available public exploit, which is hosted on GitHub.

Remediation

It is recommended to implement proper firewall rules to block unauthorized access to the vulnerable endpoint.