CVE-2021-46353

Name of the Vulnerable Software and Affected Versions D-Link DIR-X1860 versions prior to 1.03 RevA1

Description The issue is related to an information disclosure in the web interface of the affected device. It allows a remote unauthenticated attacker to send a specially crafted HTTP request to gain knowledge of different absolute paths used by the web application. This is due to insufficient protection of service data.

Recommendations For D-Link DIR-X1860 versions prior to 1.03 RevA1, update to version 1.03 RevA1 or later to resolve the issue. As a temporary workaround, consider restricting access to the web interface to minimize the risk of exploitation.