Davolink dvw 3200 routers have their login portal up on port 88, the access is password protected. The password is hardcoded in the HTLM of login page. More than 50 routers in Korea are exposed only and are accessible providing the hardcoded password. The vendor that quickly acknowledged it and responded that they have discontinued the product. The vendor added that a working patch is already available. Anubhav: Many IoT vendors are not doing the basics right as keeping the password in the HTML source”]
Source: https://securityaffairs.co/wordpress/74735/hacking/korean-davolink-routers-hack.html