CVE-2023-53974

None

CVSS

—

EPSS

0.5%

Published

Dec 22, 2025

CISA due date

—

The record

D-Link DSL-124 ME_1.00 contains a configuration file disclosure vulnerability that allows unauthenticated attackers to retrieve router settings through a POST request. Attackers can send a specific POST request to the router's configuration endpoint to download a complete backup file containing sensitive network credentials and system configurations.

Affected packages

Ecosystem	Package	Introduced	Fixed