CVE-2018-18007

atbox.htm on D-Link DSL-2770L devices allows remote unauthenticated attackers to discover admin credentials...

CVE-2018-18007

The CVE-2018-18007 issue affects D‑Link DSL‑2770L devices (web interface) via atbox.htm, enabling remote unauthenticated disclosure of the admin password. Publicly documented affected software versions include ME_1.01, ME_1.02 and AU_1.06. The root cause is exposure of the admin credential flow i...