D-Link DIR-140L / DIR-640L Credential Disclosure

Vendor us.dlink.com Product DIR-140L version 1.02 DIR-640L version 1.01RU Other versions might also be affected. Vulnerability Type admin credentials disclosure Affected Component Web Interface CVE Reference CVE-2018-18009 Security Issue An authenticated user can visit the file dirary0.js, for...

CVE-2018-18009

dirary0.js on D-Link DIR-140L, DIR-640L devices allows remote unauthenticated attackers to discover admin credentials...

CVE-2018-18009

The CVE-2018-18009 entry affects D-Link DIR-140L and DIR-640L routers (DIR-140L v1.02; DIR-640L v1.01RU). The vulnerability lies in dirary0.js, which allows remote unauthenticated attackers to disclose the admin password by reading the web interface file (example: http://victim_ip/dirary0.js). Im...

CVE-2018-18009

dirary0.js on D-Link DIR-140L, DIR-640L devices allows remote unauthenticated attackers to discover admin credentials...