D-Link DWM-222W Wi-Fi Adapter Vulnerable to Brute-Force Bypass

The National Vulnerability Database has detailed CVE-2026-6947, a high-severity brute-force protection bypass vulnerability affecting the D-Link DWM-222W USB Wi-Fi Adapter. This flaw (CVSS 7.5) allows unauthenticated attackers on an adjacent network to bypass login attempt limits. The core issue, categorized as CWE-307, enables sustained brute-force attacks.

This isn’t just a theoretical weakness. An attacker can leverage this bypass to systematically guess credentials until they gain full control over the device. While the National Vulnerability Database did not specify affected product versions, the implications are clear: any DWM-222W adapter in an accessible network segment is a potential target.

For defenders, this means a directly exposed attack surface. Gaining control of a Wi-Fi adapter can provide a beachhead into a network, enabling further reconnaissance or lateral movement. The absence of brute-force protection on a network-accessible device is a critical design flaw that attackers will absolutely exploit.