CVE-2026-113736
HIGH
8,9
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
CRITICAL
9,8
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
HIGH
10,0
Source: [email protected]
Access Vector: network
Access Complexity: low
Authentication: none
Confidentiality: complete
Integrity: complete
Availability: complete
Description
AI Translation Available
A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function login_prepare_hnap of the file etc/defnodes/defaultvalue.xml of the component HNAP Login. The manipulation of the argument Password leads to empty password in configuration file. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
258
Empty Password in Configuration File
IncompleteCommon Consequences
Security Scopes Affected:
Access Control
Potential Impacts:
Gain Privileges Or Assume Identity
Applicable Platforms
All platforms may be affected
259
Use of Hard-coded Password
DraftCommon Consequences
Security Scopes Affected:
Access Control
Potential Impacts:
Gain Privileges Or Assume Identity
Hide Activities
Reduce Maintainability
Applicable Platforms
Technologies:
ICS/OT
https://github.com/XueDugu/dlink-dhp-w610av-empty-admin-password-evidence
https://github.com/XueDugu/dlink-dhp-w610av-empty-admin-password-evidence/blob/…
https://vuldb.com/cve/CVE-2026-113736
https://vuldb.com/submit/1015789
https://vuldb.com/vuln/422892
https://vuldb.com/vuln/422892/cti
https://www.dlink.com/