Backdoor in D-Link routers found, making it possible for anyone to access it

[Mave]

Backdoor in D-Link routers found, making it possible for anyone to access your router without any credentials

http://www.devttys0.com/2013/10/reverse-engineering-a-d-link-backdoor/?

In other words, if your browser’s user agent string is “xmlset_roodkcableoj28840ybtide” (no quotes), you can access the web interface without any authentication and view/change the device settings (a DI-524UP is shown, as I don’t have a DIR-100 and the DI-524UP uses the same firmware):

xmlset_roodkcableoj28840ybtide backwards = Edit by 04882 joel backdoor

 

[ThePro]

Joel's gonna get fired.

 

[Stybar]

Hang on, I'm gonna have some with this. A lot of people in my dorm have a D-Link wifi router.
Que evil laughtrack.

 

[Mave]

Hang on, I'm gonna have some with this. A lot of people in my dorm have a D-Link wifi router.
Que evil laughtrack.

Keep us updated.