CVE-2023-53974: D-Link DSL-124 Firmware

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

D-Link DSL-124 ME_1.00 contains a configuration file disclosure vulnerability that allows unauthenticated attackers to retrieve router settings through a POST request. Attackers can send a specific POST request to the router's configuration endpoint to download a complete backup file containing sensitive network credentials and system configurations.

Affected products

• D-Link DSL-124 Firmware: version 1.00 only

Published 2025-12-22. Last modified 2026-06-17.