CVE-2026-4377

Published: Mag 28, 2026 Last Modified: Mag 28, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 6,0
Source: [email protected]
Attack Vector: adjacent
Attack Complexity: high
Privileges Required: none
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A

Description

AI Translation Available

Dlink DWR-X1820 router uses weak default password generated from its IMEI number and does not require users to change it. An attacker who knows how passwords are generated can easily crack the default password if they have the device IMEI number.

This issue was fixed in version 1.00B16CP.

1391

Use of Weak Credentials

Incomplete
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Access Control
Potential Impacts:
Bypass Protection Mechanism
Applicable Platforms
Technologies: ICS/OT, Not Technology-Specific
View CWE Details
https://cert.pl/posts/2026/05/CVE-2026-4377
https://cert.pl/posts/2026/05/CVE-2026-4377
https://www.dlink.com/pl/pl/products/dwr-1820-cp#support
https://www.dlink.com/pl/pl/products/dwr-1820-cp#support