CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-10824

An issue was discovered on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices. The administrative password is stored in plaintext in the /tmp/csman/0 file. An attacker having a directory traversal (or LFI) can easily get full router access.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.31

EPSS Ranking 96.4%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 5.0

References

Products affected by CVE-2018-10824

Dlink » Dir-140l » Version: N/A

cpe:2.3:h:dlink:dir-140l:-
Dlink » Dir-640l » Version: N/A

cpe:2.3:h:dlink:dir-640l:-
Dlink » Dwr-111 » Version: N/A

cpe:2.3:h:dlink:dwr-111:-
Dlink » Dwr-116 » Version: N/A

cpe:2.3:h:dlink:dwr-116:-
Dlink » Dwr-512 » Version: N/A

cpe:2.3:h:dlink:dwr-512:-
Dlink » Dwr-712 » Version: N/A

cpe:2.3:h:dlink:dwr-712:-
Dlink » Dwr-921 » Version: N/A

cpe:2.3:h:dlink:dwr-921:-
Dlink » Dir-140l Firmware » Version: N/A

cpe:2.3:o:dlink:dir-140l_firmware:-
Dlink » Dir-140l Firmware » Version: 1.00

cpe:2.3:o:dlink:dir-140l_firmware:1.00
Dlink » Dir-140l Firmware » Version: 1.01ru

cpe:2.3:o:dlink:dir-140l_firmware:1.01ru
Dlink » Dir-140l Firmware » Version: 1.02

cpe:2.3:o:dlink:dir-140l_firmware:1.02
Dlink » Dir-640l Firmware » Version: N/A

cpe:2.3:o:dlink:dir-640l_firmware:-
Dlink » Dir-640l Firmware » Version: 1.00

cpe:2.3:o:dlink:dir-640l_firmware:1.00
Dlink » Dir-640l Firmware » Version: 1.01ru

cpe:2.3:o:dlink:dir-640l_firmware:1.01ru
Dlink » Dir-640l Firmware » Version: 1.02

cpe:2.3:o:dlink:dir-640l_firmware:1.02
Dlink » Dwr-111 Firmware » Version: 1.00

cpe:2.3:o:dlink:dwr-111_firmware:1.00
Dlink » Dwr-111 Firmware » Version: 1.01

cpe:2.3:o:dlink:dwr-111_firmware:1.01
Dlink » Dwr-116 Firmware » Version: 1.00

cpe:2.3:o:dlink:dwr-116_firmware:1.00
Dlink » Dwr-116 Firmware » Version: 1.01

cpe:2.3:o:dlink:dwr-116_firmware:1.01
Dlink » Dwr-116 Firmware » Version: 1.02

cpe:2.3:o:dlink:dwr-116_firmware:1.02
Dlink » Dwr-116 Firmware » Version: 1.03

cpe:2.3:o:dlink:dwr-116_firmware:1.03
Dlink » Dwr-116 Firmware » Version: 1.04

cpe:2.3:o:dlink:dwr-116_firmware:1.04
Dlink » Dwr-116 Firmware » Version: 1.05

cpe:2.3:o:dlink:dwr-116_firmware:1.05
Dlink » Dwr-116 Firmware » Version: 1.06

cpe:2.3:o:dlink:dwr-116_firmware:1.06
Dlink » Dwr-512 Firmware » Version: 1.01

cpe:2.3:o:dlink:dwr-512_firmware:1.01
Dlink » Dwr-512 Firmware » Version: 1.03

cpe:2.3:o:dlink:dwr-512_firmware:1.03
Dlink » Dwr-512 Firmware » Version: 1.05

cpe:2.3:o:dlink:dwr-512_firmware:1.05
Dlink » Dwr-512 Firmware » Version: 2.00

cpe:2.3:o:dlink:dwr-512_firmware:2.00
Dlink » Dwr-512 Firmware » Version: 2.01

cpe:2.3:o:dlink:dwr-512_firmware:2.01
Dlink » Dwr-512 Firmware » Version: 2.02

cpe:2.3:o:dlink:dwr-512_firmware:2.02
Dlink » Dwr-712 Firmware » Version: 2.00

cpe:2.3:o:dlink:dwr-712_firmware:2.00
Dlink » Dwr-712 Firmware » Version: 2.01

cpe:2.3:o:dlink:dwr-712_firmware:2.01
Dlink » Dwr-712 Firmware » Version: 2.02

cpe:2.3:o:dlink:dwr-712_firmware:2.02
Dlink » Dwr-912 Firmware » Version: N/A

cpe:2.3:o:dlink:dwr-912_firmware:-
Dlink » Dwr-912 Firmware » Version: 2.02

cpe:2.3:o:dlink:dwr-912_firmware:2.02
Dlink » Dwr-921 Firmware » Version: N/A

cpe:2.3:o:dlink:dwr-921_firmware:-
Dlink » Dwr-921 Firmware » Version: 1.00

cpe:2.3:o:dlink:dwr-921_firmware:1.00
Dlink » Dwr-921 Firmware » Version: 1.01

cpe:2.3:o:dlink:dwr-921_firmware:1.01
Dlink » Dwr-921 Firmware » Version: 1.02

cpe:2.3:o:dlink:dwr-921_firmware:1.02
Dlink » Dwr-921 Firmware » Version: 1.03

cpe:2.3:o:dlink:dwr-921_firmware:1.03
Dlink » Dwr-921 Firmware » Version: 1.05

cpe:2.3:o:dlink:dwr-921_firmware:1.05
Dlink » Dwr-921 Firmware » Version: 2.00

cpe:2.3:o:dlink:dwr-921_firmware:2.00
Dlink » Dwr-921 Firmware » Version: 2.01

cpe:2.3:o:dlink:dwr-921_firmware:2.01
Dlink » Dwr-921 Firmware » Version: 2.02

cpe:2.3:o:dlink:dwr-921_firmware:2.02

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-10824

Products

Pricing

Contact Us