D-Link DSL-2770L / DIR-140L / DIR-640L Credential Disclosure

Vendor us.dlink.com Product D-Link DSL-2770L version ME1.01, ME1.02, AU1.06 D-Link DIR-140L, DIR-640L version 1.00, 1.01RU, 1.02 D-Link DWR-116, DWR-512, DWR-555, DWR-921 version V1.03, V1.05, V2.01, V2.02 Vulnerability Type admin credentials disclosure Affected Component Web Interface CVE...

CVE-2018-18008

spaces.htm on multiple D-Link devices DSL, DIR, DWR allows remote unauthenticated attackers to discover admin credentials...

CVE-2018-18008

CVE-2018-18008 affects multiple D-Link devices (e.g., DSL-2770L, DIR-140L, DIR-640L, DWR family) via the spaces.htm page, enabling remote unauthenticated disclosure of admin credentials. Root cause/impact: an attacker can obtain the admin password in clear text, leading to privileged access to th...