Threat Investigation
Request a demo

CVE-2026-4377

Medium

Description

Dlink DWR-X1820 router uses weak default password generated from its IMEI number and does not require users to change it. An attacker who knows how passwords are generated can easily crack the default password if they have the device IMEI number. This issue was fixed in version 1.00B16CP.

SeverityMedium
CVSS6.0
Exploit probability—
ProductDWR-X1820
PublishedMay 28, 2026
First seenMay 28, 2026
Weakness typeCWE-1391CWE-1391

How to fix

Update
  • D-Link Corporation DWR-X18201.00B16CP or later

Affected products

ProductAffected versionsFixed in
D-Link Corporation DWR-X18201.00B14CP ≤ v < 1.00B16CP1.00B16CP

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.