The D-Link DSL-2740B Gateway with firmware EU_1.0 when an active administrator session exists allows remote attackers to bypass authentication and gain administrator access via a request to login.cgi.