D-Link DSL-2770L Credential Disclosure

Vendor us.dlink.com Product D-Link DSL-2770L version ME1.01, ME1.02, AU1.06 Vulnerability Type admin credentials disclosure Affected Component Web Interface CVE Reference CVE-2018-18007 Security Issue An authenticated user can visit the page atbox.htm, for example, http://victimeip/atbox.htm, and...

CVE-2018-18007

atbox.htm on D-Link DSL-2770L devices allows remote unauthenticated attackers to discover admin credentials...

CVE-2018-18007

The CVE-2018-18007 issue affects D‑Link DSL‑2770L devices (web interface) via atbox.htm, enabling remote unauthenticated disclosure of the admin password. Publicly documented affected software versions include ME_1.01, ME_1.02 and AU_1.06. The root cause is exposure of the admin credential flow i...