Vulnerability Details CVE-2018-6529
XSS vulnerability in htdocs/webinc/js/bsc_sms_inbox.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted Treturn parameter to soap.cgi.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.1%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
Products affected by CVE-2018-6529
-
cpe:2.3:h:dlink:dir-860l:-
-
cpe:2.3:h:dlink:dir-865l:-
-
cpe:2.3:h:dlink:dir-868l:-
-
cpe:2.3:o:dlink:dir-860l_firmware:1.10b04
-
cpe:2.3:o:dlink:dir-860l_firmware:2.0.3
-
cpe:2.3:o:dlink:dir-860l_firmware:2.03.b03
-
cpe:2.3:o:dlink:dir-860l_firmware:a1_fw110b04
-
cpe:2.3:o:dlink:dir-865l_firmware:-
-
cpe:2.3:o:dlink:dir-865l_firmware:1.07b01
-
cpe:2.3:o:dlink:dir-865l_firmware:1.08b01
-
cpe:2.3:o:dlink:dir-865l_firmware:1.20b01
-
cpe:2.3:o:dlink:dir-865l_firmware:reva_firmware_patch_1.08.b01
-
cpe:2.3:o:dlink:dir-868l_firmware:-
-
cpe:2.3:o:dlink:dir-868l_firmware:1.10
-
cpe:2.3:o:dlink:dir-868l_firmware:1.12
-
cpe:2.3:o:dlink:dir-868l_firmware:1.12_eu_multi_20170316
-
cpe:2.3:o:dlink:dir-868l_firmware:1.12b04
-
cpe:2.3:o:dlink:dir-868l_firmware:2.00
-
cpe:2.3:o:dlink:dir-868l_firmware:2.01
-
cpe:2.3:o:dlink:dir-868l_firmware:2.03
-
cpe:2.3:o:dlink:dir-868l_firmware:2.05b02
-
cpe:2.3:o:dlink:dir-868l_firmware:3.00
-
cpe:2.3:o:dlink:dir-868l_firmware:3.01
-
cpe:2.3:o:dlink:dir-868l_firmware:a1_fw112b04