D-Link DSL-124 Wireless N 300 ADSL2+ Modem Router Session Hijacking Vulnerability

A session management vulnerability has been identified in the D-Link Wireless N 300 ADSL2+ Modem Router DSL-124, specifically in the ME_1.00 firmware version. This vulnerability allows attackers to execute session hijacking attacks by spoofing the IP address of an authenticated user. The router's web interface lacks proper session management, relying solely on IP addresses for authentication, which can be exploited by attackers on the local network to gain unauthorized administrative access.

Impact

Exploitation of this vulnerability allows for unauthorized administrative access to the router's web management interface, enabling attackers to perform arbitrary administrative actions without valid credentials.