Dhp W610Av
Monthly
D-Link DHP-W610AV firmware 1.02EUb03 leaves the administrative HNAP password empty in its default configuration, so remote attackers who can reach the management interface can log in without valid credentials and obtain full control of the device. The issue is unauthenticated and requires no user interaction (CVSS 8.9), and publicly available exploit code exists; active exploitation is not confirmed by CISA KEV.
D-Link DHP-W610AV firmware 1.02EUb03 leaves the administrative HNAP password empty in its default configuration, so remote attackers who can reach the management interface can log in without valid credentials and obtain full control of the device. The issue is unauthenticated and requires no user interaction (CVSS 8.9), and publicly available exploit code exists; active exploitation is not confirmed by CISA KEV.