CVE-2017-12943

D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/showinfo.php?REQUIREFILE= absolute path traversal attack, as demonstrated by discovering the admin password...

CVE-2017-12943

CVE-2017-12943 affects D-Link DIR-600 Rev Bx devices with v2.x firmware. The vulnerability is an absolute path traversal in the endpoint model/__show_info.php?REQUIRE_FILE= which allows remote attackers to read passwords (admin credentials) from the device. Public mention in multiple sources (Exp...

CVE-2017-12943: Improper Limitation of a Pathname to a Restricted Directory

D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/showinfo.php?REQUIREFILE= absolute path traversal attack, as demonstrated by discovering the admin password...

PT-2017-12787 · D Link · Dir-600M

Name of the Vulnerable Software and Affected Versions: D-Link DIR-600 Rev Bx versions 2.x Description: The issue allows remote attackers to read passwords via an absolute path traversal attack using the "model/ show info.php?REQUIRE FILE=" endpoint. This can be exploited to discover the admin...

CVE-2014-9518: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in login.cgi in D-Link router DIR-655 rev Bx with firmware before 2.12b01 allows remote attackers to inject arbitrary web script or HTML via the htmlresponsepage parameter...