CVE-2017-7406

Name of the Vulnerable Software and Affected Versions D-Link DIR-615 versions prior to 20.12PTb04

Description The issue allows an attacker to steal user credentials by monitoring network traffic, as the device does not use SSL for authenticated pages and does not allow users to generate their own SSL certificates.

Recommendations For versions prior to 20.12PTb04, update to version 20.12PTb04 or later to resolve the issue. As a temporary workaround, consider restricting access to the device's web interface to minimize the risk of exploitation. Avoid using the device's web interface over unsecured networks until the issue is resolved.