CVE-2018-17881: D-Link Dir-823g Firmware

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

On D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 SetPasswdSettings commands without authentication to trigger an admin password change.

Affected products

• D-Link Dir-823g Firmware: affected versions not specified

Published 2018-10-03. Last modified 2026-06-17.