D-Link and TRENDnet 'ncc2' service - multiple vulnerabilities

Local network; unauthenticated access.
Remote network; unauthenticated access*.
Remote network; 'drive-by' via CSRF.

more here.......https://github.com/darkarnium/secpub/tree/master/Multivendor/ncc2