High severity7.5NVD Advisory· Published Mar 25, 2019· Updated Jun 17, 2026
CVE-2019-10042
CVE-2019-10042
Description
The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use an API URL /goform/LoadDefaultSettings to reset the router without authentication.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:o:dlink:dir-816_firmware:1.11:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- github.com/PAGalaxyLab/VulInfo/blob/master/D-Link/DIR-816/reset_router/README.mdnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.