CVE-2018-10618

🗓️ 01 Aug 2018 18:00:00Reported by icscertType

cve🔗 web.nvd.nist.gov👁 48 Views🌐 WEB

Davolink DVW-3200N prior to Version 1.00.06 has weak password hash

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2018-10618	2 Aug 201808:58	–	circl
CNVD	Davolink DVW-3200N Router Weak Password Vulnerability	2 Aug 201800:00	–	cnvd
Cvelist	CVE-2018-10618	1 Aug 201818:00	–	cvelist
Exploit DB	Davolink DVW 3200 Router - Password Disclosure	23 Jul 201800:00	–	exploitdb
ICS	Davolink DVW-3200N	31 Jul 201800:00	–	ics
NVD	CVE-2018-10618	1 Aug 201818:29	–	nvd
OSV	CVE-2018-10618	1 Aug 201818:29	–	osv
Prion	Default credentials	1 Aug 201818:29	–	prion

NVD

Vulners

Node

AND

davolink dvw-3200n_firmwareRange<1.00.06

davolink dvw-3200nMatch-

[
  {
    "product": "DVW-3200N",
    "vendor": "Davolink",
    "versions": [
      {
        "status": "affected",
        "version": "all version prior to Version 1.00.06"
      }
    ]
  }
]

Source	Link
exploit-db	www.exploit-db.com/exploits/45076/
securityfocus	www.securityfocus.com/bid/104940
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-212-01

Parameter	Position	Path	Description	CWE
var user_passwd	path	<ip>:88	Password disclosure vulnerability via HTTP service on port 88 exposing a weak password hash in the device's web page	CWE-916
password_hash	path	<ip>:88	Password disclosure vulnerability via HTTP service on port 88 exposing a weak password hash in the device's web page	CWE-916

17 Jun 2026 01:34Current

9.3High risk

Vulners AI Score9.3

CVSS 25

CVSS 39.8

EPSS0.10123

CWE-916