# CVE-2016-10179: D-Link DWR-932B hardcoded WPS PIN

Source: https://junglewise.ai/threats/cve-2016-10179-d-link-dwr-932b-hardcoded-wps-pin  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2017-01-30. Updated: 2026-05-13  
License: CC BY 4.0 with a link back

CVE-2016-10179 · Severity: high · CVSS 7.5 · Published 2017-01-30

The D-Link DWR-932B LTE router contains a hardcoded Wi-Fi Protected Setup (WPS) PIN. This allows anyone within wireless range of the device to easily connect to the Wi-Fi network without knowing the actual password. Once connected, an unauthorized user could monitor network traffic or access other devices on the local network.

Technologies: [Dlink Dwr-932b](https://junglewise.ai/threats/technologies/dwr-932b), [Dlink Dwr-932b Firmware](https://junglewise.ai/threats/technologies/dwr-932b-firmware). Vendors: [Dlink](https://junglewise.ai/threats/vendors/dlink).

## Quick answers

**Is CVE-2016-10179 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2016-10179 being exploited in the wild.

**How severe is CVE-2016-10179?** High severity, with a CVSS score of 7.5, published 30 January 2017.

**Which products and versions are affected?** D-Link DWR-932B Rev. B (Firmware 02.02EU).

**Is there a fix for CVE-2016-10179?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2016-10179 attacked?** It is attacked from the adjacent network, in a network appliance.

**Am I affected by CVE-2016-10179?** Check whether you run Dlink Dwr-932b or Dlink Dwr-932b Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A hardcoded WPS PIN vulnerability exists in the D-Link DWR-932B (Revision B) router. The PIN '28296607' is hardcoded within the /bin/appmgr binary and is used by the HostAP configuration by default. An attacker within wireless range can use this static PIN to bypass Wi-Fi authentication and join the network. Additionally, the router's algorithm for generating alternative PINs relies on a weak seed (system time), making them susceptible to brute-force attacks. As of the advisory date, no official patch was provided by the vendor.

## Affected products

- D-Link DWR-932B Rev. B (Firmware 02.02EU)

## Timeline

- 2016-09-28: disclosed: Initial researcher disclosure by Pierre Kim
- 2017-01-30: advisory: NVD publication date

## References

- [http://www.securityfocus.com/bid/95877](http://www.securityfocus.com/bid/95877)
- [https://pierrekim.github.io/blog/2016-09-28-dlink-dwr-932b-lte-routers-vulnerabilities.html](https://pierrekim.github.io/blog/2016-09-28-dlink-dwr-932b-lte-routers-vulnerabilities.html)

## Related threats

- [D-Link DWR-932B missing deny rules in UPnP configuration](https://junglewise.ai/threats/cve-2016-10186-d-link-dwr-932b-missing-deny-rules-in-upnp-configuration)
- [D-Link DWR-932B disabled UPnP security mode](https://junglewise.ai/threats/cve-2016-10185-d-link-dwr-932b-disabled-upnp-security-mode)
- [D-Link DWR-932B path traversal in qmiweb](https://junglewise.ai/threats/cve-2016-10184-d-link-dwr-932b-path-traversal-in-qmiweb)
- [D-Link DWR-932B directory traversal in qmiweb](https://junglewise.ai/threats/cve-2016-10183-d-link-dwr-932b-directory-traversal-in-qmiweb)
- [D-Link DWR-932B command injection in qmiweb](https://junglewise.ai/threats/cve-2016-10182-d-link-dwr-932b-command-injection-in-qmiweb)