CVE-2013-6026 Auth bypass in n/a
Remote attackers can bypass authentication and modify router settings by sending a specific User-Agent header, affecting multiple D-Link, Planex, and Alpha Networks devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2013-6026?
CVE-2013-6026 is a critical authentication bypass vulnerability in n/a, published on 19 Oct 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The web interface on D-Link DIR-100, DIR-120, DI-624S, DI-524UP, DI-604S, DI-604UP, DI-604+, and TM-G5240 routers; Planex BRL-04R, BRL-04UR, and BRL-04CW routers; and Alpha Networks routers allows remote attackers to bypass authentication and modify settings via an xmlset_roodkcableoj28840ybtide User-Agent HTTP header, as exploited in the wild in October 2013.
Weakness: CWE-264
Which versions are affected by CVE-2013-6026?
It affects 13 products.
Products include Alphanetworks Vdsl Asl-55052, Alphanetworks Vdsl Asl-56552, Dlink Di-524up, Dlink Di-604\+, Dlink Di-604s, Dlink Di-604up and 7 more.
How do I fix CVE-2013-6026?
No fix has been published for CVE-2013-6026 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2013-6026 being exploited?
There is no known exploitation of CVE-2013-6026 in the wild and no public exploit code.
Sources
Also known as GHSA-v2pf-28pq-8p67.