D-Link DAP-1860 devices before v1.04b03 Beta allow access to administrator functions without authentication via the HNAP_AUTH header timestamp value. In HTTP requests, part of the HNAP_AUTH header is the timestamp used to determine the time when the user sent the request. If this value is equal to the value stored in the devices /var/hnap/timestamp file, the request will pass the HNAP_AUTH check function.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Dap-1860_firmware | Dlink | 1.01b06 (including) | 1.01b06 (including) |
| Dap-1860_firmware | Dlink | 1.02b01 (including) | 1.02b01 (including) |
| Dap-1860_firmware | Dlink | 1.04b01 (including) | 1.04b01 (including) |