CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-10822

Directory traversal vulnerability in the web interface on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices allows remote attackers to read arbitrary files via a /.. or // after "GET /uir" in an HTTP request. NOTE: this vulnerability exists because of an incorrect fix for CVE-2017-6190.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.864

EPSS Ranking 99.3%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2018-10822

Dlink » Dir-140l » Version: N/A

cpe:2.3:h:dlink:dir-140l:-
Dlink » Dir-640l » Version: N/A

cpe:2.3:h:dlink:dir-640l:-
Dlink » Dwr-111 » Version: N/A

cpe:2.3:h:dlink:dwr-111:-
Dlink » Dwr-116 » Version: N/A

cpe:2.3:h:dlink:dwr-116:-
Dlink » Dwr-512 » Version: N/A

cpe:2.3:h:dlink:dwr-512:-
Dlink » Dwr-712 » Version: N/A

cpe:2.3:h:dlink:dwr-712:-
Dlink » Dwr-921 » Version: N/A

cpe:2.3:h:dlink:dwr-921:-
Dlink » Dir-140l Firmware » Version: N/A

cpe:2.3:o:dlink:dir-140l_firmware:-
Dlink » Dir-140l Firmware » Version: 1.00

cpe:2.3:o:dlink:dir-140l_firmware:1.00
Dlink » Dir-140l Firmware » Version: 1.01ru

cpe:2.3:o:dlink:dir-140l_firmware:1.01ru
Dlink » Dir-140l Firmware » Version: 1.02

cpe:2.3:o:dlink:dir-140l_firmware:1.02
Dlink » Dir-640l Firmware » Version: N/A

cpe:2.3:o:dlink:dir-640l_firmware:-
Dlink » Dir-640l Firmware » Version: 1.00

cpe:2.3:o:dlink:dir-640l_firmware:1.00
Dlink » Dir-640l Firmware » Version: 1.01ru

cpe:2.3:o:dlink:dir-640l_firmware:1.01ru
Dlink » Dir-640l Firmware » Version: 1.02

cpe:2.3:o:dlink:dir-640l_firmware:1.02
Dlink » Dwr-111 Firmware » Version: 1.00

cpe:2.3:o:dlink:dwr-111_firmware:1.00
Dlink » Dwr-111 Firmware » Version: 1.01

cpe:2.3:o:dlink:dwr-111_firmware:1.01
Dlink » Dwr-116 Firmware » Version: 1.00

cpe:2.3:o:dlink:dwr-116_firmware:1.00
Dlink » Dwr-116 Firmware » Version: 1.01

cpe:2.3:o:dlink:dwr-116_firmware:1.01
Dlink » Dwr-116 Firmware » Version: 1.02

cpe:2.3:o:dlink:dwr-116_firmware:1.02
Dlink » Dwr-116 Firmware » Version: 1.03

cpe:2.3:o:dlink:dwr-116_firmware:1.03
Dlink » Dwr-116 Firmware » Version: 1.04

cpe:2.3:o:dlink:dwr-116_firmware:1.04
Dlink » Dwr-116 Firmware » Version: 1.05

cpe:2.3:o:dlink:dwr-116_firmware:1.05
Dlink » Dwr-116 Firmware » Version: 1.06

cpe:2.3:o:dlink:dwr-116_firmware:1.06
Dlink » Dwr-512 Firmware » Version: 1.01

cpe:2.3:o:dlink:dwr-512_firmware:1.01
Dlink » Dwr-512 Firmware » Version: 1.03

cpe:2.3:o:dlink:dwr-512_firmware:1.03
Dlink » Dwr-512 Firmware » Version: 1.05

cpe:2.3:o:dlink:dwr-512_firmware:1.05
Dlink » Dwr-512 Firmware » Version: 2.00

cpe:2.3:o:dlink:dwr-512_firmware:2.00
Dlink » Dwr-512 Firmware » Version: 2.01

cpe:2.3:o:dlink:dwr-512_firmware:2.01
Dlink » Dwr-512 Firmware » Version: 2.02

cpe:2.3:o:dlink:dwr-512_firmware:2.02
Dlink » Dwr-712 Firmware » Version: 2.00

cpe:2.3:o:dlink:dwr-712_firmware:2.00
Dlink » Dwr-712 Firmware » Version: 2.01

cpe:2.3:o:dlink:dwr-712_firmware:2.01
Dlink » Dwr-712 Firmware » Version: 2.02

cpe:2.3:o:dlink:dwr-712_firmware:2.02
Dlink » Dwr-912 Firmware » Version: N/A

cpe:2.3:o:dlink:dwr-912_firmware:-
Dlink » Dwr-912 Firmware » Version: 2.02

cpe:2.3:o:dlink:dwr-912_firmware:2.02
Dlink » Dwr-921 Firmware » Version: N/A

cpe:2.3:o:dlink:dwr-921_firmware:-
Dlink » Dwr-921 Firmware » Version: 1.00

cpe:2.3:o:dlink:dwr-921_firmware:1.00
Dlink » Dwr-921 Firmware » Version: 1.01

cpe:2.3:o:dlink:dwr-921_firmware:1.01
Dlink » Dwr-921 Firmware » Version: 1.02

cpe:2.3:o:dlink:dwr-921_firmware:1.02
Dlink » Dwr-921 Firmware » Version: 1.03

cpe:2.3:o:dlink:dwr-921_firmware:1.03
Dlink » Dwr-921 Firmware » Version: 1.05

cpe:2.3:o:dlink:dwr-921_firmware:1.05
Dlink » Dwr-921 Firmware » Version: 2.00

cpe:2.3:o:dlink:dwr-921_firmware:2.00
Dlink » Dwr-921 Firmware » Version: 2.01

cpe:2.3:o:dlink:dwr-921_firmware:2.01
Dlink » Dwr-921 Firmware » Version: 2.02

cpe:2.3:o:dlink:dwr-921_firmware:2.02

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-10822

Products

Pricing

Contact Us