D-Link DI-7003GV2 Unverified Password Change Vulnerability in Web Management Interface

A critical vulnerability exists in the D-Link DI-7003GV2 router, specifically in version 24.04.18D1 R(68125). The issue is located in the web management interface, within the 'webgl.asp' file. The vulnerability allows for an unverified password change by exploiting a specific function, 'sub_41F4F0'. This issue can be triggered remotely, potentially leading to unauthorized access or management of the device.

Impact

Exploitation of this vulnerability allows for unauthorized password changes, which could lead to unauthorized access or control over the affected device.