VulnSocial

CVE-2023-34282Disclosure(dlink / dir-2150)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch dlink dir-2150 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

D-Link DIR-2150 HNAP Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2150 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SOAP API interface, which listens on TCP port 80 by default. A crafted authentication header can cause authentication to succeed without providing proper credentials. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-20910.

dlink CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-303

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • dir-2150
  • dir-2150_firmware

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
dlink
Products
dir-2150dir-2150_firmware

1 version affected across 2 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-08: 1Patch / Workaround · 2026-06-08: 1Technical Details · 2026-06-08: 106-08
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    Disclosure

    CVE-2023-34282 - Critical auth bypass in D-Link DIR-2150 routers. No auth required, network-adjacent exploit via SOAP API on port 80. CVSS 8.8. No patch available. Isolate or replace these devices immediately. #CVE #DLink #infosec #Networking #CVEAlert https://www.valtersit.com/cve/CVE-2023-34282

    Post summary

    CVE-2023-34282 is a critical authentication bypass in D‑Link DIR‑2150 routers via a SOAP API on port 80 (CVSS 8.8); no patch exists, so devices should be isolated or replaced.

    10000125
    921 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
HWdlinkdir-2150---
OSdlinkdir-2150_firmware---

Explore more

Back to dashboarddlink CVEsdir-2150 vulnerabilities