CVE-2025-1104 is a high severity (CVSS 7.3) authentication bypass in the D-Link DHP-W310AV, firmware 1.04. The login check can be defeated by spoofing, and the attack is remote. The record names no fixed firmware, so check D-Link support for an advisory and keep the admin page off untrusted networks.
What's affected
The record names D-Link DHP-W310AV 1.04. NVD scores it 7.3 (HIGH) with the vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. The attack is remote, needs no privileges and no user interaction. Weakness classes: CWE-287, CWE-290.
No fixed firmware is listed in the record, and the references are a public write-up, VulDB entries and the D-Link home page. Check the D-Link support site for this model, and note that older consumer devices are often no longer updated.
How to check if you're exposed
Open the device web page and read the firmware string. The record names 1.04, so a match means you should treat the device as affected. Next, check from outside your network whether the management page answers on the public address.
If you cannot tell where the device sits, scan your internal address ranges for its web interface and note every one you find. Unmanaged devices on a flat network are the usual blind spot.
What to do now
- Check the D-Link support page for the DHP-W310AV and install any firmware newer than 1.04.
- Turn off remote administration and keep the management page on a trusted network only.
- Change the device password, and do not reuse it elsewhere.
- If D-Link offers no update, plan to replace the device.
- Place it on a separate network segment until it is gone.
Why it matters
Authentication bypass by spoofing means the device trusts something the client controls when it decides who is logged in. If the check can be faked, the password stops mattering. The weakness classes are CWE-287 and CWE-290.
Consumer network devices often stop getting firmware updates long before people stop using them. When no patch exists, the safe options are to cut off remote access, isolate the device, or replace it.
Try it yourself
Click through it at your own pace, or open it full screen.
Quick check
Can I fix this with a password change?
Not by itself, because the weakness is in how the device decides who is authenticated. Remove remote access and look for firmware.
What if there is no update?
Isolate the device, switch off remote administration, and plan a replacement.
Sources
- NVD record for CVE-2025-1104
- Reference listed in the record
- Reference listed in the record
- Safeguard Gold page for CVE-2025-1104
Last reviewed: 19 October 2026.
