D-Link WBR-1310 Authentication Bypass Vulnerability

Craig Heffner

www.devttys0.com

Vulnerability Summary

The WBR-1310 suffers from an authentication bypass vulnerability that can be exploited by remote attackers to change administrative settings. Note that this vulnerability can be exploited via CSRF even if remote administration is disabled.

Affected Products

This vulnerability has been confirmed in the WBR-1310 running firmware version 2.00.

Description

The WBR-1310 CGI scripts do not validate authentication credentials. Administrative settings can be changed by sending the appropriate HTTP request directly to a CGI script without authenticating to the device. The following request will change the administrative password to 'hacked' and enable remote administration on port 8080: http://192.168.0.1/tools_admin.cgi? admname=admin&admPass1=hacked&admPass2=hacked&username=user&userPass1=WD B8WvbXdHtZyM8&userPass2=WDB8WvbXdHtZyM8&hip1=*&hport=8080&hEnable=1 Note that the CGI arguments can be passed via GET requests making this vulnerability trivial to exploit via CSRF.

Vulnerability Impact

If remote administration is enabled, any external attacker can gain full control over the router. Even if remote administration is not enabled, any Web page that any internal user browses to can change the administrator password and enable remote administration via a hidden image tag embedded in the Web page. No Javascript is required. Although later firmware versions are not affected, version 2.00 is the default firmware that ships with this device. All WBR-1310 routers found via Shodan searches were running version 2.00.

Mitigations

Later firmware versions are not affected. Upgrade to the latest firmware.

Features

Faster Wireless Networking - The WBR-1310 provides up to 54Mbps* wireless connection with other 802.11g wireless clients. This capability allows users to participate in real-time activities online, such as video streaming, online gaming, and real-time audio. The performance of this 802.11g wireless router gives you the freedom of wireless networking at speeds 5x faster than 802.11b. Compatible with 802.11b and 802.11g Devices - The WBR-1310 is still fully compatible with the IEEE 802.11b standard, so it can connect with existing 802.11b PCI, USB and Cardbus adapters. Advanced Firewall Features - The Web-based user interface displays a number of advanced network management features including: Content Filtering - Easily applied content filtering based on MAC Address, URL, and/or Domain Name. Secure Multiple/Concurrent Sessions - The WBR-1310 can pass through VPN sessions. It supports multiple and concurrent IPSec and PPTP sessions, so users behind the WBR-1310 can securely access corporate networks. User-friendly Setup Wizard - Through its easy-to-use Web-based user interface, the WBR-1310 lets you control what information is accessible to those on the wireless network, whether from the Internet or from your companys server. Configure your router to your specific settings within minutes.

Hardware Overview

Connections
Pressing the Reset Button restores the router to its original factory default settings. Receptor for the Power Adapter.
LAN Ports Connect Ethernet devices such as computers, switches, and hubs.
The Auto MDI/MDIX WAN port is the connection for the Ethernet cable to the Cable or DSL modem.
WAN LED A solid light indicates connection on the WAN port. This LED blinks during data transmission.
WLAN LED A solid light indicates that the wireless segment is ready. This LED blinks during wireless data transmission.
Local Network LEDs A solid light indicates a connection to an Ethernet-enabled computer on ports 1-4. This LED blinks during data transmission.
Power LED A solid light indicates a proper connection to the power supply.
Status LED A blinking light indicates that the WBR-1310 is ready.

Section 2 - Installation

Installation
This section will walk you through the installation process. Placement of the router is very important. Do not place the router in an enclosed area such as a closet, cabinet, or in the attic or garage.

Before you Begin

Please configure the router with the computer that was last connected directly to your modem. Also, you can only use the Ethernet port on your modem. If you were using the USB connection before using the router, then you must turn off your modem, disconnect the USB cable and connect an Ethernet cable to the WAN port on the router, and then turn the modem back on. In some cases, you may need to call your ISP to change connection types (USB to Ethernet). If you have DSL and are connecting via PPPoE, make sure you disable or uninstall any PPPoE software such as WinPoet, Broadjump, or Enternet 300 from your computer or you will not be able to connect to the Internet.

Connect to Another Router
If you are connecting the D-Link router to another router to use as a wireless access point and/or switch, you will have to do the following before connecting the router to your network: Disable UPnP Disable DHCP Change the LAN IP address to an available address on your network. The LAN ports on the router cannot accept a DHCP address from your other router. To connect to another router, please follow the steps below: 1. Plug the power into the router. Connect one of your computers to the router (LAN port) using an Ethernet cable. Make sure your IP address on the computer is 192.168.0.xxx (where xxx is between 2 and 254). Please see the Networking Basics section for more information. If you need to change the settings, write down your existing settings before making any changes. In most cases, your computer should be set to receive an IP address automatically in which case you will not have to do anything to your computer. 2. Open a web browser and enter http://192.168.0.1 and press Enter. When the login window appears, set the user name to admin and leave the password box empty. Click OK to continue. 3. Click on Advanced and then click Advanced Network. Uncheck the Enable UPnP checkbox. Click Save Settings to continue. 4. Click Setup and then click Network Settings. Uncheck the Enable DHCP Server server checkbox. Click Save Settings to continue. 5. Under Router Settings, enter an available IP address and the subnet mask of your network. Click Save Settings to save your settings. Use this new IP address to access the configuration utility of the router in the future. Close the browser and change your computers IP settings back to the original values as in Step 1.
D-Link WBR-1310 User Manual 12
6. Disconnect the Ethernet cable from the router and reconnect your computer to your network. 7. Connect an Ethernet cable in one of the LAN ports of the router and connect it to your other router. Do not plug anything into the WAN port of the D-Link router. 8. You may now use the other 3 LAN ports to connect other Ethernet devices and computers. To configure your wireless network, open a web browser and enter the IP address you assigned to the router. Refer to the Configuration and Wireless Security sections for more information on setting up your wireless network.
Section 3 - Configuration

Configuration

This section will show you how to configure your new D-Link wireless router using the web-based configuration utility.
Web-based Configuration Utility

L2TP: Select Dynamic (most common) or Static. Select Static if your ISP assigned you the IP address, subnet mask, gateway, and DNS server addresses. IP Address: Enter the IP address (Static L2TP only). Subnet Mask: Enter the Primary and Secondary DNS Server Addresses (Static L2TP only). Gateway: Enter the Gateway IP Address provided by your ISP. DNS: The DNS server information will be supplied by your ISP (Internet Service Provider.) Server IP: Enter the Server IP provided by your ISP (optional). L2TP Account: Enter your L2TP account name. L2TP Password: Enter your L2TP password and then retype the password in the next box. Maximum Idle Enter a maximum idle time during which the Internet connection is maintained during inactivity. To disable this feature, enable Time: Auto-reconnect. MTU: Maximum Transmission Unit - you may need to change the MTU for optimal performance with your specific ISP. 1492 is the default MTU. Connect Mode: Select either Always-on, Manual, or Connect-on demand. D-Link WBR-1310 User Manual 22

Big Pond

User Name: Enter your Big Pond user name. Password: Enter your Big Pond password and then retype the password in the next box. Auth Server: Enter the IP address of the login server. Login Server IP: Enter the IP address of the login server. MAC Address: The default MAC Address is set to the WANs physical interface MAC address on the Broadband Router. It is not recommended that you change the default MAC address unless required by your ISP. Clone MAC The default MAC address is set to the WANs Address: physical interface MAC address on the Broadband Router. You can use the Clone MAC Address button to copy the MAC address of the Ethernet Card installed by your ISP and replace the WAN MAC address with the MAC address of the router. It is not recommended that you change the default MAC address unless required by your ISP.

Static (assigned by ISP)

Select Static IP Address if all WAN IP information is provided to you by your ISP. You will need to enter in the IP address, subnet mask, gateway address, and DNS address(es) provided to you by your ISP. Each IP address entered in the fields must be in the appropriate IP form, which are four octets separated by a dot (x.x.x.x). The Router will not accept the IP address if it is not in this format. IP Address: Enter the IP address assigned by your ISP. Subnet Mask: Enter the Subnet Mask assigned by your ISP. ISP Gateway: Enter the Gateway assigned by your ISP. MAC Address: The default MAC Address is set to the WANs physical interface MAC address on the Broadband Router. It is not recommended that you change the default MAC address unless required by your ISP. Clone MAC The default MAC address is set to the WANs Address: physical interface MAC address on the Broadband Router. You can use the Clone MAC Address button to copy the MAC address of the Ethernet Card installed by your ISP and replace the WAN MAC address with the MAC address of the router. It is not recommended that you change the default MAC address unless required by your ISP. Primary DNS Enter the Primary DNS server IP address Address: assigned by your ISP. Secondary DNS This is optional. Address: MTU: Maximum Transmission Unit - you may need to change the MTU for optimal performance with your specific ISP. 1492 is the default MTU. D-Link WBR-1310 User Manual 24

Wireless Settings

Enable Wireless: Check the box to enable the wireless function. If you do not want to use wireless, uncheck the box to disable all the wireless functions. Wireless Network Service Set Identifier (SSID) is the name of your Name: wireless network. Create a name using up to 32 characters. The SSID is case-sensitive. Wireless Channel: Indicates the channel setting for the WBR-2310. By default the channel is set to 6. The Channel can be changed to fit the channel setting for an existing wireless network or to customize the wireless network. The Auto Channel Scan setting can be selected to allow the WBR-2310 to choose the channel with the least amount of interference. 802.11g Only Enable this mode if your network is made up of Mode: purely 802.11g devices. If you have both 802.11b and 802.11g wireless clients, uncheck the box. Enable Hidden Check this option if you would not like the SSID Wireless: of your wireless network to be broadcasted by the WBR-2310. If this option is checked, the SSID of the WBR-2310 will not be seen by Site Survey utilities so your wireless clients will have to know the SSID of your WBR-2310 in order to connect to it.

Network Settings

This section will allow you to change the local network settings of the router and to configure the DHCP settings.
IP Address: Enter the IP address of the router. The default IP address is 192.168.0.1. If you change the IP address, once you click Apply, you will need to enter the new IP address in your browser to get back into the configuration utility. Subnet Mask: Enter the Subnet Mask. The default subnet mask is 255.255.255.0. Local Domain: Enter the Domain name (Optional). Enable DNS Relay: Check the box to transfer the DNS server information from your ISP to your computers. If unchecked, your computers will use the router for a DNS server. Refer to the next page for DHCP information.

DHCP Server Settings

DHCP stands for Dynamic Host Control Protocol. The WBR-2310 has a built-in DHCP server. The DHCP Server will automatically assign an IP address to the computers on the LAN/private network. Be sure to set your computers to be DHCP clients by setting their TCP/IP settings to Obtain an IP Address Automatically. When you turn your computers on, they will automatically load the proper TCP/IP settings provided by the WBR-2310. The DHCP Server will automatically allocate an unused IP address from the IP address pool to the requesting computer. You must specify the starting and ending address of the IP address pool.

Enable DHCP Check the box to enable the DHCP server on Server: your router. Uncheck to disable this function. DHCP IP Address Enter the starting and ending IP addresses for Range: the DHCP servers IP assignment. Lease Time: The length of time for the IP address lease. Enter the Lease time in minutes.

Port Forwarding Rules

This will allow you to open a single port or a range of ports.
Rule: Check the box to enabled the rule. Name: Enter a name for the rule. IP Address: Enter the IP address of the computer on your local network that you want to allow the incoming service to. Start Port/ Enter the port or ports that you want to open. End Port: If you want to open 1 port, enter the same port in both boxes. Traffic Type: Select TCP, UDP, or ANY.

Application Rules

Some applications require multiple connections, such as Internet gaming, video conferencing, Internet telephony and others. These applications have difficulties working through NAT (Network Address Translation). Special Applications makes some of these applications work with the WBR-1310.
Rule: Check the box to enabled the rule. Name: Enter a name for the rule. Trigger Port: This is the port used to trigger the application. It can be either a single port or a range of ports. Firewall Port: This is the port number on the WAN side that will be used to access the application. You may define a single port or a range of ports. You can use a comma to add multiple ports or port ranges. Traffic Type: Select TCP, UDP, or ANY.

Network Filter

Use MAC (Media Access Control) Filters to allow or deny LAN (Local Area Network) computers by their MAC addresses from accessing the Network. You can either manually add a MAC address or select the MAC address from the list of clients that are currently connected to the Broadband Router.
Configure MAC Select Disable MAC filters, allow MAC addresses Filter: listed below, or deny MAC addresses listed below. MAC Address: Enter the MAC address you would like to filter. To find the MAC address on a computer, please refer to the Networking Basics section in this manual. DHCP Client: Select a DHCP client from the drop-down menu and click the arrow to copy that MAC Address.

Website Filter

URL and domain blocking are used to deny LAN computers from accessing specific web sites by the URL or domain. A URL is a specially formatted text string that defines a location on the Internet. If any part of the URL contains the blocked word, the site will not be accessible and the web page will not display. To use this feature, enter the text string to be blocked and click Apply. The text to be blocked will appear in the list. To delete the text, just highlight it and click Delete.

Advanced Network Settings
UPnP Settings: To use the Universal Plug and Play (UPnP) feature click on Enabled. UPNP provides compatibility with networking equipment, software and peripherals. WAN Ping: Unchecking the box will not allow the WBR2310 to respond to pings. Blocking the Ping may provide some extra security from hackers. Check the box to allow the WAN port to be pinged. WAN select to You may set the port speed of the WAN port to 10/100 Mbps: 10Mbps, 100Mbps, or auto. Some older cable or DSL modems may require you to set the port speed to 10Mbps. Gaming Mode: Gaming mode allows a form of pass-through for certain Internet Games. If you are using Xbox, Playstation2 or a PC, make sure you are using the latest firmware and Gaming Mode is enabled. To utilize Gaming Mode, click the box. If you are not using a Gaming application, it is recommended that you Disable Gaming Mode. Multicast Check the box to allow multicast traffic to pass streams: through the router from the Internet.

Administrator Settings

This page will allow you to change the Administrator and User passwords. You can also enable Remote Management. There are two accounts that can access the management interface through the web browser. The accounts are admin and user. Admin has read/write access while user has read-only access. User can only view the settings but cannot make any changes. Only the admin account has the ability to change both admin and user account passwords.
Administrator Enter a new Login Name for the Administrator account. Login Name: Administrator Enter a new password for the Administrator Login Password: Name. The administrator can make changes to the settings. User Login Name: Enter a new Login Name for the user account. User Password: Enter the new password for the User login. If you login as the User, you can only see the settings, but cannot change them. Remote Remote management allows the WBR-1310 Management: to be configured from the Internet by a web browser. A username and password is still required to access the Web-Management interface. In general, only a member of your network can browse the built-in web pages to perform Administrator tasks. This feature enables you to perform Administrator tasks from the remote (Internet) host. IP Address: The Internet IP address of the computer that has access to the Broadband Router. If you input an asterisk (*) into this field, then any computer will be able to access the Router. Putting an asterisk (*) into this field would present a security risk and is not recommended. Port: The port number used to access the WBR-1310. Example: http://x.x.x.x:8080 whereas x.x.x.x is the WAN IP address of the WBR-1310 and 8080 is the port used for the Web-Management interface. D-Link WBR-1310 User Manual 35

Time Settings

Time Zone: Select the Time Zone from the drop-down menu. Daylight Saving: To select Daylight Saving time manually, select enabled or disabled, and enter a start date and an end date for daylight saving time. Automatic: NTP is short for Network Time Protocol. NTP synchronizes computer clock times in a network of computers. This field is optional. Manual: To manually input the time, enter the values in these fields for the Year, Month, Day, Hour, Minute, and Second. Click Set Time.You can also click Copy Your Computers Time Settings.

System Settings

Save Settings to Use this option to save the current router Local Hard Drive: configuration settings to a file on the hard disk of the computer you are using. First, click the Save button. You will then see a file dialog, where you can select a location and file name for the settings. Load Settings Use this option to load previously saved from Local Hard router configuration settings. First, use the Drive: Browse control to find a previously save file of configuration settings. Then, click the Load button to transfer those settings to the router. Restore to Factory This option will restore all configuration settings Default Settings: back to the settings that were in effect at the time the router was shipped from the factory. Any settings that have not been saved will be lost, including any rules that you have created. If you want to save the current router configuration settings, use the Save button above.

Firmware Upgrade

You can upgrade the firmware of the Router here. Make sure the firmware you want to use is on the local hard drive of the computer. Click on Browse to locate the firmware file to be used for the update. Please check the D-Link support site for firmware updates at http://support.dlink.ca. You can download firmware upgrades to your hard drive from the D-Link support site.
Firmware Click on the link in this screen to find out if there Upgrade: is an updated firmware; if so, download the new firmware to your hard drive. Browse: After you have downloaded the new firmware, click Browse in this window to locate the firmware update on your hard drive. Click Save Settings to complete the firmware upgrade.

System Check

Virtual Cable VCT is an advanced feature that integrates a Tester (VCT) Info: LAN cable tester on every Ethernet port on the router. Through the graphical user interface (GUI), VCT can be used to remotely diagnose and report cable faults such as opens, shorts, swaps, and impedance mismatch. This feature significantly reduces service calls and returns by allowing users to easily troubleshoot their cable connections. Ping Test: The Ping Test is used to send Ping packets to test if a computer is on the Internet. Enter the IP Address that you wish to Ping, and click Ping.

Configure WPA-PSK

It is recommended to enable encryption on your wireless router before your wireless network adapters. Please establish wireless connectivity before enabling encryption. Your wireless signal may degrade when enabling encryption due to the added overhead. 1.Log into the web-based configuration by opening a web browser and entering the IP address of the router (192.168.0.1). Click on Wireless Settings on the left side. 2. Next to Security Mode, select Enable WPA-Personal Security or Enable WPA2-Personal Security. 3. Next to Cipher Mode, select TKIP, AES, or Auto. 4. Next to PSK/EAP, select PSK. 5.Next to Passphrase, enter a key (passphrase). The key is an alpha-numeric password between 8 and 63 characters long. The password can include symbols (!?*&_) and spaces. Make sure you enter this key exactly the same on all other wireless clients. 6. Enter the passphrase again next to Confirmed Passphrase. 7.Click Save Settings to save your settings. If you are configuring the router with a wireless adapter, you will lose connectivity until you enable WPA-PSK (or WPA2-PSK) on your adapter and enter the same passphrase as you did on the router.

Configure WPA (RADIUS)

It is recommended to enable encryption on your wireless router before your wireless network adapters. Please establish wireless connectivity before enabling encryption. Your wireless signal may degrade when enabling encryption due to the added overhead. 1.Log into the web-based configuration by opening a web browser and entering the IP address of the router (192.168.0.1). Click on Wireless Settings on the left side. 2. Next to Security Mode, select Enable WPA-Personal Security or Enable WPA2-Personal Security. 3. Next to Cipher Mode, select TKIP, AES, or Auto. 4. Next to PSK/EAP, select EAP. 5.Next to RADIUS Server 1 enter the IP Address of your RADIUS server. 6.Next to Port, enter the port you are using with your RADIUS server. 1812 is the default port. 7.Next to Shared Secret, enter the security key. 8.If you have a secondary RADIUS server, enter its IP address, port, and secret key. 9.Click Apply Settings to save your settings.
Section 5 - Connecting to a Wireless Network
Connect to a Wireless Network

Using Windows XP

Windows XP users may use the built-in wireless utility (Zero Configuration Utility). The following instructions are for Service Pack 2 users. If you are using another companys utility or Windows 2000, please refer to the user manual of your wireless adapter for help with connecting to a wireless network. Most utilities will have a site survey option similar to the Windows XP utility as seen below. If you receive the Wireless Networks Detected bubble, click on the center of the bubble to access the utility. or
Right-click on the wireless computer icon in your system tray (lower-right corner next to the time). Select View Available Wireless Networks.

The utility will display any available wireless networks in your area. Click on a network (displayed using the SSID) and click the Connect button. If you get a good signal but cannot access the Internet, check you TCP/IP settings for your wireless adapter. Refer to the Networking Basics section in this manual for more information.
It is recommended to enable WEP on your wireless router or access point before configuring your wireless adapter. If you are joining an existing network, you will need to know the WEP key being used.
1.Open the Windows XP Wireless Utility by right-clicking on the wireless computer icon in your system tray (lower-right corner of screen). Select View Available Wireless Networks.
2.Highlight the wireless network (SSID) you would like to connect to and click Connect.
3.The Wireless Network Connection box will appear. Enter the same WEP key that is on your router and click Connect. It may take 20-30 seconds to connect to the wireless network. If the connection fails, please verify that the WEP settings are correct. The WEP key must be exactly the same as on the wireless router.
3.The Wireless Network Connection box will appear. Enter the WPA-PSK passphrase and click Connect. It may take 20-30 seconds to connect to the wireless network. If the connection fails, please verify that the WPA-PSK settings are correct. The WPA-PSK passphrase must be exactly the same as on the wireless router.
Section 6 - Troubleshooting

Troubleshooting

This chapter provides solutions to problems that can occur during the installation and operation of the WBR-1310. Read the following descriptions if you are having problems. (The examples below are illustrated in Windows XP. If you have a different operating system, the screenshots on your computer will look similar to the following examples.) 1. Why cant I access the web-based configuration utility? When entering the IP address of the D-Link router (192.168.0.1 for example), you are not connecting to a website on the Internet or have to be connected to the Internet. The device has the utility built-in to a ROM chip in the device itself. Your computer must be on the same IP subnet to connect to the web-based utility. Make sure you have an updated Java-enabled web browser. We recommend the following: Internet Explorer 6.0 or higher Netscape 8 or higher Mozilla 1.7.12 (5.0) or higher Opera 8.5 or higher Safari 1.2 or higher (with Java 1.3.1 or higher) Camino 0.8.4 or higher Firefox 1.5 or higher Verify physical connectivity by checking for solid link lights on the device. If you do not get a solid link light, try using a different cable or connect to a different port on the device if possible. If the computer is turned off, the link light may not be on. Disable any internet security software running on the computer. Software firewalls such as Zone Alarm, Black Ice, Sygate, Norton Personal Firewall, and Windows XP firewall may block access to the configuration pages. Check the help files included with your firewall software for more information on disabling or configuring it.

D-Link WBR-1310 User Manual 54
Configure your Internet settings: Go to Start > Settings > Control Panel. Double-click the Internet Options Icon. From the Security tab, click the button to restore the settings to their defaults. Click the Connection tab and set the dial-up option to Never Dial a Connection. Click the LAN Settings button. Make sure nothing is checked. Click OK. Go to the Advanced tab and click the button to restore these settings to their defaults. Click OK three times. Close your web browser (if open) and open it. Access the web management. Open your web browser and enter the IP address of your D-Link router in the address bar. This should open the login page for your the web management. If you still cannot access the configuration, unplug the power to the router for 10 seconds and plug back in. Wait about 30 seconds and try accessing the configuration. If you have multiple computers, try connecting using a different computer. 2. What can I do if I forgot my password? If you forgot your password, you must reset your router. Unfortunately this process will change all your settings back to the factory defaults. To reset the router, locate the reset button (hole) on the rear panel of the unit. With the router powered on, use a paperclip to hold the button down for 10 seconds. Release the button and the router will go through its reboot process. Wait about 30 seconds to access the router. The default IP address is 192.168.0.1. When logging in, the username is admin and leave the password box empty.
3. Why cant I connect to certain sites or send and receive emails when connecting through my router? If you are having a problem sending or receiving email, or connecting to secure sites such as eBay, banking sites, and Hotmail, we suggest lowering the MTU in increments of ten (Ex. 1492, 1482, 1472, etc). Note: AOL DSL+ users must use MTU of 1400. To find the proper MTU Size, youll have to do a special ping of the destination youre trying to go to. A destination could be another computer, or a URL. Click on Start and then click Run. Windows 95, 98, and Me users type in command (Windows NT, 2000, and XP users type in cmd) and press Enter (or click OK). Once the window opens, youll need to do a special ping. Use the following syntax: ping [url] [-f] [-l] [MTU value]

Limited Warranty:

D-Link warrants that the hardware portion of the D-Link product described below (Hardware) will be free from material defects in workmanship and materials under normal use from the date of original retail purchase of the product, for the period set forth below (Warranty Period), except as otherwise stated herein. Hardware (excluding power supplies and fans): One (1) year Power supplies and fans: One (1) year Spare parts and spare kits: Ninety (90) days
The customers sole and exclusive remedy and the entire liability of D-Link and its suppliers under this Limited Warranty will be, at D-Links option, to repair or replace the defective Hardware during the Warranty Period at no charge to the original owner or to refund the actual purchase price paid. Any repair or replacement will be rendered by D-Link at an Authorized D-Link Service Office. The replacement hardware need not be new or have an identical make, model or part. D-Link may, at its option, replace the defective Hardware or any part thereof with any reconditioned product that D-Link reasonably determines is substantially equivalent (or superior) in all material respects to the defective Hardware. Repaired or replacement hardware will be warranted for the remainder of the original Warranty Period or ninety (90) days, whichever is longer, and is subject to the same limitations and exclusions. If a material defect is incapable of correction, or if D-Link determines that it is not practical to repair or replace the defective Hardware, the actual price paid by the original purchaser for the defective Hardware will be refunded by D-Link upon return to D-Link of the defective Hardware. All Hardware or part thereof that is replaced by D-Link, or for which the purchase price is refunded, shall become the property of D-Link upon replacement or refund.
Limited Software Warranty:
D-Link warrants that the software portion of the product (Software) will substantially conform to D-Links then current functional specifications for the Software, as set forth in the applicable documentation, from the date of original retail purchase of the Software for a period of ninety (90) days (Software Warranty Period), provided that the Software is properly installed on approved hardware and operated as contemplated in its documentation. D-Link further warrants that, during the Software Warranty Period, the magnetic media on which D-Link delivers the Software will be free of physical defects. The customers sole and exclusive remedy and the entire liability of D-Link and its suppliers under this Limited Warranty will be, at D-Links option, to replace the non-conforming Software (or defective media) with software that substantially conforms to D-Links functional specifications for the Software or to refund the portion of the actual purchase price paid that is attributable to the Software. Except as otherwise agreed by DLink in writing, the replacement Software is provided only to the original licensee, and is subject to the terms and conditions of the license granted by D-Link for the Software. Replacement Software will be warranted for the remainder of the original Warranty Period and is subject to the same limitations and exclusions. If a material non-conformance is incapable of correction, or if D-Link determines in its sole discretion that it is not practical to replace the non-conforming Software, the price paid by the original licensee for the non-conforming Software will be refunded by D-Link; provided that the non-conforming Software (and all copies thereof) is first returned to D-Link. The license granted respecting any Software for which a refund is given automatically terminates.

What Is Not Covered:

The Limited Warranty provided herein by D-Link does not cover: Products that, in D-Links judgment, have been subjected to abuse, accident, alteration, modification, tampering, negligence, misuse, faulty installation, lack of reasonable care, repair or service in any way that is not contemplated in the documentation for the product, or if the model or serial number has been altered, tampered with, defaced or removed; Initial installation, installation and removal of the product for repair, and shipping costs; Operational adjustments covered in the operating manual for the product, and normal maintenance; Damage that occurs in shipment, due to act of God, failures due to power surge, and cosmetic damage; Any hardware, software, firmware or other products or services provided by anyone other than D-Link; and Products that have been purchased from inventory clearance or liquidation sales or other sales in which D-Link, the sellers, or the liquidators expressly disclaim their warranty obligation pertaining to the product. While necessary maintenance or repairs on your Product can be performed by any company, we recommend that you use only an Authorized D-Link Service Office. Improper or incorrectly performed maintenance or repair voids this Limited Warranty.
Disclaimer of Other Warranties:
EXCEPT FOR THE LIMITED WARRANTY SPECIFIED HEREIN, THE PRODUCT IS PROVIDED AS-IS WITHOUT ANY WARRANTY OF ANY KIND WHATSOEVER INCLUDING, WITHOUT LIMITATION, ANY WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
Appendix E - Warranty IF ANY IMPLIED WARRANTY CANNOT BE DISCLAIMED IN ANY TERRITORY WHERE A PRODUCT IS SOLD, THE DURATION OF SUCH IMPLIED WARRANTY SHALL BE LIMITED TO THE DURATION OF THE APPLICABLE WARRANTY PERIOD SET FORTH ABOVE. EXCEPT AS EXPRESSLY COVERED UNDER THE LIMITED WARRANTY PROVIDED HEREIN, THE ENTIRE RISK AS TO THE QUALITY, SELECTION AND PERFORMANCE OF THE PRODUCT IS WITH THE PURCHASER OF THE PRODUCT.

Limitation of Liability:

TO THE MAXIMUM EXTENT PERMITTED BY LAW, D-LINK IS NOT LIABLE UNDER ANY CONTRACT, NEGLIGENCE, STRICT LIABILITY OR OTHER LEGAL OR EQUITABLE THEORY FOR ANY LOSS OF USE OF THE PRODUCT, INCONVENIENCE OR DAMAGES OF ANY CHARACTER, WHETHER DIRECT, SPECIAL, INCIDENTAL OR CONSEQUENTIAL (INCLUDING, BUT NOT LIMITED TO, DAMAGES FOR LOSS OF GOODWILL, LOSS OF REVENUE OR PROFIT, WORK STOPPAGE, COMPUTER FAILURE OR MALFUNCTION, FAILURE OF OTHER EQUIPMENT OR COMPUTER PROGRAMS TO WHICH D-LINKS PRODUCT IS CONNECTED WITH, LOSS OF INFORMATION OR DATA CONTAINED IN, STORED ON, OR INTEGRATED WITH ANY PRODUCT RETURNED TO D-LINK FOR WARRANTY SERVICE) RESULTING FROM THE USE OF THE PRODUCT, RELATING TO WARRANTY SERVICE, OR ARISING OUT OF ANY BREACH OF THIS LIMITED WARRANTY, EVEN IF D-LINK HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. THE SOLE REMEDY FOR A BREACH OF THE FOREGOING LIMITED WARRANTY IS REPAIR, REPLACEMENT OR REFUND OF THE DEFECTIVE OR NONCONFORMING PRODUCT. THE MAXIMUM LIABILITY OF D-LINK UNDER THIS WARRANTY IS LIMITED TO THE PURCHASE PRICE OF THE PRODUCT COVERED BY THE WARRANTY. THE FOREGOING EXPRESS WRITTEN WARRANTIES AND REMEDIES ARE EXCLUSIVE AND ARE IN LIEU OF ANY OTHER WARRANTIES OR REMEDIES, EXPRESS, IMPLIED OR STATUTORY.