D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/__show_info.php?REQUIRE_FILE= absolute path traversal attack, as demonstrated by discovering the admin password.
CPE | Name | Operator | Version |
---|---|---|---|
dir-600_b1_firmware | eq | 2.01 |