CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-6527

XSS vulnerability in htdocs/webinc/js/adv_parent_ctrl_map.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted deviceid parameter to soap.cgi.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 69.2%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2018-6527

Dlink » Dir-860l » Version: N/A

cpe:2.3:h:dlink:dir-860l:-
Dlink » Dir-865l » Version: N/A

cpe:2.3:h:dlink:dir-865l:-
Dlink » Dir-868l » Version: N/A

cpe:2.3:h:dlink:dir-868l:-
Dlink » Dir-860l Firmware » Version: 1.10b04

cpe:2.3:o:dlink:dir-860l_firmware:1.10b04
Dlink » Dir-860l Firmware » Version: 2.0.3

cpe:2.3:o:dlink:dir-860l_firmware:2.0.3
Dlink » Dir-860l Firmware » Version: 2.03.b03

cpe:2.3:o:dlink:dir-860l_firmware:2.03.b03
Dlink » Dir-860l Firmware » Version: a1_fw110b04

cpe:2.3:o:dlink:dir-860l_firmware:a1_fw110b04
Dlink » Dir-865l Firmware » Version: N/A

cpe:2.3:o:dlink:dir-865l_firmware:-
Dlink » Dir-865l Firmware » Version: 1.07b01

cpe:2.3:o:dlink:dir-865l_firmware:1.07b01
Dlink » Dir-865l Firmware » Version: 1.08b01

cpe:2.3:o:dlink:dir-865l_firmware:1.08b01
Dlink » Dir-865l Firmware » Version: 1.20b01

cpe:2.3:o:dlink:dir-865l_firmware:1.20b01
Dlink » Dir-865l Firmware » Version: reva_firmware_patch_1.08.b01

cpe:2.3:o:dlink:dir-865l_firmware:reva_firmware_patch_1.08.b01
Dlink » Dir-868l Firmware » Version: N/A

cpe:2.3:o:dlink:dir-868l_firmware:-
Dlink » Dir-868l Firmware » Version: 1.10

cpe:2.3:o:dlink:dir-868l_firmware:1.10
Dlink » Dir-868l Firmware » Version: 1.12

cpe:2.3:o:dlink:dir-868l_firmware:1.12
Dlink » Dir-868l Firmware » Version: 1.12_eu_multi_20170316

cpe:2.3:o:dlink:dir-868l_firmware:1.12_eu_multi_20170316
Dlink » Dir-868l Firmware » Version: 1.12b04

cpe:2.3:o:dlink:dir-868l_firmware:1.12b04
Dlink » Dir-868l Firmware » Version: 2.00

cpe:2.3:o:dlink:dir-868l_firmware:2.00
Dlink » Dir-868l Firmware » Version: 2.01

cpe:2.3:o:dlink:dir-868l_firmware:2.01
Dlink » Dir-868l Firmware » Version: 2.03

cpe:2.3:o:dlink:dir-868l_firmware:2.03
Dlink » Dir-868l Firmware » Version: 2.05b02

cpe:2.3:o:dlink:dir-868l_firmware:2.05b02
Dlink » Dir-868l Firmware » Version: 3.00

cpe:2.3:o:dlink:dir-868l_firmware:3.00
Dlink » Dir-868l Firmware » Version: 3.01

cpe:2.3:o:dlink:dir-868l_firmware:3.01
Dlink » Dir-868l Firmware » Version: a1_fw112b04

cpe:2.3:o:dlink:dir-868l_firmware:a1_fw112b04

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-6527

Products

Pricing

Contact Us