CVE-2018-10822

CVE-2018-10822 describes a directory traversal / local file inclusion in the web interfaces of multiple D-Link routers (DWR-116 up to v1.06, DIR-140L up to v1.02, DIR-640L up to v1.02, DWR-512 up to v2.02, DWR-712 up to v2.02, DWR-912 up to v2.02, DWR-921 up to v2.02, DWR-111 up to v1.01, and rel...

CVE-2018-10824

Summary of CVE-2018-10824 (D-Link routers): A directory-traversal/LFI vulnerability affects multiple D-Link devices (DWR-116, DIR-140L, DIR-640L, DWR-512, DWR-712, DWR-912, DWR-921, DWR-111). The administrative password is stored in plaintext in the /tmp/csman/0 file, enabling an attacker to obta...

CVE-2018-18008

CVE-2018-18008 affects multiple D-Link devices (e.g., DSL-2770L, DIR-140L, DIR-640L, DWR family) via the spaces.htm page, enabling remote unauthenticated disclosure of admin credentials. Root cause/impact: an attacker can obtain the admin password in clear text, leading to privileged access to th...

CVE-2018-18009

The CVE-2018-18009 entry affects D-Link DIR-140L and DIR-640L routers (DIR-140L v1.02; DIR-640L v1.01RU). The vulnerability lies in dirary0.js, which allows remote unauthenticated attackers to disclose the admin password by reading the web interface file (example: http://victim_ip/dirary0.js). Im...