What is GHSA-624f-p4gg-qwg2?

GHSA-624f-p4gg-qwg2 is a security advisory published by GitHub Security Advisories with Medium severity. Dlink DWR-X1820 router uses weak default password generated from its IMEI number and does not...

Which CVE IDs does GHSA-624f-p4gg-qwg2 cover?

GHSA-624f-p4gg-qwg2 covers the following CVE IDs: CVE-2026-4377. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-624f-p4gg-qwg2Medium

Dlink DWR-X1820 router uses weak default password generated from its IMEI number and does not...

Vendor

GitHub Security Advisories

Published

May 28, 2026

Last Modified

May 28, 2026

🔗 CVE IDs covered (1)

CVE-2026-4377 →

📋 Description

Dlink DWR-X1820 router uses weak default password generated from its IMEI number and does not require users to change it. An attacker who knows how passwords are generated can easily crack the default password if they have the device IMEI number.

This issue was fixed in version 1.00B16CP.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-4377
https://cert.pl/posts/2026/05/CVE-2026-4377
https://www.dlink.com/pl/pl/products/dwr-1820-cp#support
https://github.com/advisories/GHSA-624f-p4gg-qwg2