Log in Start free

Vulnerability · Published Oct 20, 2026 · Assigned by VulDB

CVE-2026-113735D-Link DCS-6501LH aoni_ipc mydlink_set_root_pwd weak credentials

Low 3.7

In plain English

A low-severity security flaw in DCS-6501LH from D-Link. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).

Severity (CVSS 3.1)3.7Low
Exploit odds (30 days)0.7%top 47.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlink_set_root_pwd of the file /mnt/mtd/aoni_ipc. Executing a manipulation can lead to use of weak credentials. The attack may be launched remotely. The attack requires a high level of complexity. The exploitation appears to be difficult. The exploit has been publicly disclosed and may be utilized.

Affected products (as reported)

VendorProductVersions
D-Link DCS-6501LH 3.03.02

Weakness: CWE-1391 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R

References