Which versions of D-Link DWM-222W are affected by EUVD-2026-25395?

The D-Link DWM-222W USB Wi-Fi Adapter contains a brute-force protection bypass (CVE-2026-6947, CVSS 8.7) that allows unauthenticated remote attackers to conduct unlimited login attempts, creating…. A patch is available.

How to fix or mitigate EUVD-2026-25395?

Within 24 hours: Identify and document all D-Link DWM-222W adapters in use across the organization (endpoints, remote workers, network infrastructure). Within 7 days: Isolate affected devices from production networks or disable remote management interfaces if operationally feasible; implement network-level access controls restricting login attempts to the adapter's management interface. Within 30 days: Monitor D-Link security advisories for patch availability; prepare deployment plan for patched firmware or hardware replacement; consider discontinuing procurement of this model pending vendor fix.

D-Link DWM-222W EUVD-2026-25395

Q: What is the CVSS score of EUVD-2026-25395?

EUVD-2026-25395 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-6947 HIGH

Improper Restriction of Excessive Authentication Attempts (CWE-307)

2026-04-24 twcert

GHSA-j7j4-xj8f-m78g

Authentication Bypass D-Link

8.7

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

8.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Re-analysis Queued

Apr 24, 2026 - 14:52 vuln.today

cvss_changed

Patch released

Apr 24, 2026 - 14:39 nvd

Patch available

Apr 24, 2026 - 05:31 EUVD

Analysis Generated

Apr 24, 2026 - 04:31 vuln.today

CVSS changed

Apr 24, 2026 - 04:22 NVD

7.5 (HIGH) 8.7 (HIGH)

EUVD ID Assigned

Apr 24, 2026 - 04:00 euvd

EUVD-2026-25395

Analysis Generated

Apr 24, 2026 - 04:00 vuln.today

CVE Published

Apr 24, 2026 - 03:46 nvd

HIGH 8.7

DescriptionCVE.org

DWM-222W USB Wi-Fi Adapter developed by D-Link has a Brute-Force Protection Bypass vulnerability, allowing unauthenticated adjacent network attackers to bypass login attempt limits to perform brute-force attacks to gain control over the device.

AnalysisAI

Brute-force protection bypass in D-Link DWM-222W USB Wi-Fi Adapter allows remote unauthenticated attackers to perform unlimited authentication attempts against the device's login interface. The vulnerability eliminates rate limiting controls, enabling adversaries to systematically guess credentials until device takeover is achieved. CVSS 8.7 reflects the high integrity impact (VI:H) from potential device compromise, though no public exploit code has been identified and CISA has not flagged active exploitation.

Technical ContextAI

The D-Link DWM-222W is a USB-based Wi-Fi adapter providing wireless network connectivity. This vulnerability stems from CWE-307 (Improper Restriction of Excessive Authentication Attempts), indicating the device fails to implement proper account lockout mechanisms, rate limiting, or CAPTCHA-style challenges after failed login attempts. The CVSS 4.0 vector shows network accessibility (AV:N) with low attack complexity (AC:L), suggesting the login interface is exposed over the network without requiring adjacent network positioning despite the description stating 'adjacent network attackers.' This discrepancy warrants verification-the CVSS vector indicates broader network exposure than the description implies. The CPE string cpe:2.3:a:d-link:dwm-222w:*:*:*:*:*:*:*:* shows all versions are affected with no version specificity provided.

RemediationAI

Consult the official TWCERT advisory at https://www.twcert.org.tw/en/cp-139-10865-de323-2.html and D-Link support channels for firmware updates addressing CVE-2026-6947-no specific patched version number has been independently confirmed in available intelligence. Until patches are verified and deployed, implement these compensating controls: Disable remote management interfaces on the DWM-222W and restrict administrative access to local-only connections, eliminating network-based attack surface (trade-off: reduced remote manageability). Implement network-level access controls using firewall rules to block unauthorized access to device management ports from untrusted network segments. Deploy strong unique credentials exceeding 16 characters with high entropy to increase brute-force time requirements beyond practical attack windows (trade-off: increased credential management complexity). Monitor authentication logs for repeated failed login attempts as an indicator of exploitation attempts. For enterprise deployments, consider replacing affected hardware with alternative Wi-Fi solutions offering robust authentication controls and account lockout mechanisms.