CVE-2017-9100

Name of the Vulnerable Software and Affected Versions D-Link DIR-600M firmware 3.04

Description The issue allows remote attackers to bypass authentication on the device by entering more than 20 blank spaces in the password field during an admin login attempt to the "login.cgi" endpoint.

Recommendations For firmware 3.04, consider restricting access to the "login.cgi" endpoint until a patch is available, and avoid using blank spaces in the password field to minimize the risk of exploitation.