CVE-2019-10042

CVE-2019-10042 describes an authentication bypass vulnerability in D-Link DIR-816 A2 1.11 routers, allowing an unauthenticated attacker to reset the device to factory defaults. This high-severity vulnerability (CVSS 7.5) has a low attack complexity and requires no user interaction, as an attacker can obtain a required token from a publicly accessible page and then use a specific API endpoint. While there is no evidence of active exploitation, nor publicly available exploit code in common repositories, the vulnerability's nature poses a significant risk for affected devices.