PatchTheCVECVE-2003-1346: D-Link wireless access point DWL-900AP+ 2.2, 2.3 and possibly 2.5 allows remote attackers to set factory defau
CVE-2003-1346 is a high-severity flaw (CVSS 10.0) affecting dwl-900ap\+. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
D-Link wireless access point DWL-900AP+ 2.2, 2.3 and possibly 2.5 allows remote attackers to set factory default settings by upgrading the firmware using AirPlus Access Point Manager.
Why this priority
- Critical severity
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 10.0 (High) |
| EPSS exploit chance | 2.0% (top 20%) |
| CISA exploited list | No |
| Weakness | CWE-264 |
| Published | 2003-12-31 |
| Last modified | 2026-06-16 |
Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2003-1346?
dwl-900ap\+: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2003-1346 being exploited?
CVE-2003-1346 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2003-1346 affect?
CVE-2003-1346 affects dwl-900ap\+. Severity is high (CVSS 10.0). D-Link wireless access point DWL-900AP+ 2.2, 2.3 and possibly 2.5 allows remote attackers to set factory default settings by upgrading the firmware using AirPlus Access Point Manager.
How urgent is CVE-2003-1346?
Priority 55/100. Critical severity
Software pages
Related CVEs
- CVE-2002-2137 MEDIUM 5.0 MITIGATE MITIGATE GlobalSunTech Wireless Access Points (1) WISECOM GL2422AP-0T, and possibly OEM products such as (2) D-Link DWL