Dir 803 Firmware
Monthly
Unauthenticated information disclosure in D-Link DIR-803 routers running firmware up to 1.04 lets remote attackers retrieve device configuration data by bypassing the authorization check on the /getcfg.php Configuration Handler through manipulation of the AUTHORIZED_GROUP argument. The flaw requires only network reachability to the router's HTTP management interface - no credentials or user interaction are needed (PR:N/UI:N per the assessed vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) - and a publicly available proof-of-concept exploit exists. Exploitation is not confirmed as active (not listed in CISA KEV), but the EPSS score of 3.99% sits at the 90th percentile, and because the affected model is end-of-life and no longer supported by D-Link, no vendor firmware fix is expected, leaving exposure dependent on whether the admin interface is reachable from an untrusted network.
webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Unauthenticated information disclosure in D-Link DIR-803 routers running firmware up to 1.04 lets remote attackers retrieve device configuration data by bypassing the authorization check on the /getcfg.php Configuration Handler through manipulation of the AUTHORIZED_GROUP argument. The flaw requires only network reachability to the router's HTTP management interface - no credentials or user interaction are needed (PR:N/UI:N per the assessed vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) - and a publicly available proof-of-concept exploit exists. Exploitation is not confirmed as active (not listed in CISA KEV), but the EPSS score of 3.99% sits at the 90th percentile, and because the affected model is end-of-life and no longer supported by D-Link, no vendor firmware fix is expected, leaving exposure dependent on whether the admin interface is reachable from an untrusted network.
webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.