Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2018-6530
HistoryMar 06, 2018 - 8:29 p.m.

CVE-2018-6530

2018-03-0620:29:00
CWE-78
[email protected]
web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.9 High

AI Score

Confidence

High

0.936 High

EPSS

Percentile

99.1%

JSON

OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-65L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to execute arbitrary OS commands via the service parameter.

Affected configurations

NVD
Node
dlinkdir-860l_firmwareRange≤a1_fw110b04
AND
dlinkdir-860lMatch-
Node
dlinkdir-865l_firmwareRange≤reva_firmware_patch_1.08.b01
AND
dlinkdir-865lMatch-
Node
dlinkdir-868l_firmwareRange≤a1_fw112b04
AND
dlinkdir-868lMatch-
Node
dlinkdir-880l_firmwareRange≤reva_firmware_patch_1.08b04
AND
dlinkdir-880lMatch-

Related

cve 2
prion 2
nuclei 1
cisa_kev 1
checkpoint_advisories 1
attackerkb 2
openvas 3
cvelist 2
nvd 1
thn 1
cve
cve
CVE-2018-6530
2018-03-06 20:29:00
CVE-2018-20114
2019-01-02 18:29:01
prion
prion
Command injection
2018-03-06 20:29:00
Command injection
2019-01-02 18:29:00
nuclei
nuclei
D-Link - Unauthenticated Remote Code Execution
2022-10-02 13:15:14
cisa_kev
cisa_kev
D-Link Multiple Routers OS Command Injection Vulnerability
2022-09-08 00:00:00
checkpoint_advisories
checkpoint_advisories
D-Link Multiple Products Command Injection (CVE-2018-6530)
2022-09-20 00:00:00
attackerkb
attackerkb
CVE-2018-6530
2018-03-06 00:00:00
CVE-2018-20114
2019-01-02 00:00:00
openvas
openvas
D-Link DIR Routers OS Command Injection Vulnerability (Mar 2018)
2018-03-21 00:00:00
D-Link DAP-1522 Devices Multiple Vulnerabilities (Sep 2022)
2023-05-23 00:00:00
D-Link Multiple DIR Devices Multiple Vulnerabilities (Sep 2022)
2023-05-23 00:00:00
cvelist
cvelist
CVE-2018-6530
2018-03-06 20:00:00
CVE-2018-20114
2019-01-02 18:00:00
nvd
nvd
CVE-2018-20114
2019-01-02 18:29:01
thn
thn
Mirai Variant MooBot Botnet Exploiting D-Link Router Vulnerabilities
2022-09-07 06:57:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.9 High

AI Score

Confidence

High

0.936 High

EPSS

Percentile

99.1%

JSON
Related for NVD:CVE-2018-6530
cve2prion2nuclei1cisa_kev1checkpoint_advisories1attackerkb2openvas3cvelist2nvd1thn1