CVE-2019-19223

A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an attacker to reboot the router by submitting a reboot.html GET request without being authenticated on the admin interface.

• CWE-79
• CWE-444

• https://github.com/0x8b30cc/DSL-2680-Multiple-VulnerabilitiesThird Party Advisory
• https://github.com/0x8b30cc/DSL-2680-Multiple-Vulnerabilities/blob/master/CVE-2019-19223.mdExploit, Third Party Advisory
• https://www.dlink.com/en/security-bulletinVendor Advisory
• https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdfThird Party Advisory, US Government Resource
• https://github.com/0x8b30cc/DSL-2680-Multiple-VulnerabilitiesThird Party Advisory
• https://github.com/0x8b30cc/DSL-2680-Multiple-Vulnerabilities/blob/master/CVE-2019-19223.mdExploit, Third Party Advisory
• https://www.dlink.com/en/security-bulletinVendor Advisory
• https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdfThird Party Advisory, US Government Resource

Published

Mar 4, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-19218BMC Control-M/Agent 7.0.00.000 has Insecure Password Storage…7.5
• CVE-2019-19219BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Downloa…7.5
• CVE-2019-1922A vulnerability in Cisco SIP IP Phone Software for Cisco IP …5.3
• CVE-2019-19220BMC Control-M/Agent 7.0.00.000 allows OS Command Injection (…8.8
• CVE-2019-19221In Libarchive 3.4.0, archive_wstring_append_from_mbs in arch…5.5
• CVE-2019-19222A Stored XSS issue in the D-Link DSL-2680 web administration…5.4
• CVE-2019-19224A Broken Access Control vulnerability in the D-Link DSL-2680…7.5
• CVE-2019-19225A Broken Access Control vulnerability in the D-Link DSL-2680…7.5
• CVE-2019-19226A Broken Access Control vulnerability in the D-Link DSL-2680…7.5
• CVE-2019-19227In the AppleTalk subsystem in the Linux kernel before 5.1, t…5.5
• CVE-2019-19228Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) all…9.8
• CVE-2019-19229admincgi-bin/service.fcgi on Fronius Solar Inverter devices …6.5