Description
Dlink DWR-X1820 router uses weak default password generated from its IMEI number and does not require users to change it. An attacker who knows how passwords are generated can easily crack the default password if they have the device IMEI number.
This issue was fixed in version 1.00B16CP.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| D-Link | DWR-X1820 | 1.00B14CP – < 1.00B16CP | 1.00B16CP |
References
- https://cert.pl/posts/2026/05/CVE-2026-4377 third-party-advisory
- https://www.dlink.com/pl/pl/products/dwr-1820-cp#support product