An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices. One can bypass authentication mechanisms to download the configuration file.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Dir-809_a1_firmware | D-link | * | 1.09 |
| Dir-809_a2_firmware | D-link | * | 1.11 |
| Dir-809_guestzone_firmware | D-link | * | 1.09 |