CVE-2026-113735: Use of Weak Credentials in D-Link DCS-6501LH
Description
CVE-2026-113735 is a vulnerability in the D-Link DCS-6501LH device version 3.03.02 involving the use of weak credentials in the mydlink_set_root_pwd function. The vulnerability can be exploited remotely but requires a high level of complexity, making exploitation difficult. The vulnerability has been publicly disclosed and carries a medium severity rating with a CVSS 4.0 score of 6.3.
CVSS v4.0
Score 6.3medium
Affected software
D-Link
DCS-6501LH
cpe:2.3:h:d-link:dcs-6501lh:*:*:*:*:*:*:*:*AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability affects the D-Link DCS-6501LH device running firmware version 3.03.02. It is located in the mydlink_set_root_pwd function within the /mnt/mtd/aoni_ipc file. The flaw allows an attacker to manipulate the system to use weak credentials, potentially compromising device security. The attack vector is remote network access, but the attack complexity is high and no privileges or user interaction are required. The vulnerability has been publicly disclosed, but no known exploits are currently observed in the wild.
Potential Impact
Successful exploitation could allow an attacker to cause the device to use weak credentials, which may lead to unauthorized access or control of the device. However, the attack complexity is high, and no known active exploitation has been reported, limiting immediate risk.
Mitigation Recommendations
No patch or official fix information is provided for this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Due to the high attack complexity and lack of known exploits in the wild, immediate urgent action may not be required, but monitoring vendor communications for updates is recommended.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-10-20T16:11:02.595Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ad801742cdf04f656733cef
Added to database: 10/21/2026, 00:04:04 UTC
Last enriched: 10/21/2026, 00:18:36 UTC
Last updated: 10/21/2026, 00:18:36 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.