CVE-2018-10824

CRITICAL

Dlink Dwr-116 Firmware < 1.06 - Path Traversal

Title source: rule

Description

An issue was discovered on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices. The administrative password is stored in plaintext in the /tmp/csman/0 file. An attacker having a directory traversal (or LFI) can easily get full router access.

Exploits (1)

exploitdb WRITEUP
by Blazej Adamczyk · webappshardware
https://www.exploit-db.com/exploits/45677

Scores

CVSS v3 9.8
EPSS 0.4403
EPSS Percentile 97.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-22 CWE-522
Status published

Affected Products (8)

dlink/dwr-116_firmware < 1.06
dlink/dir-140l_firmware < 1.02
dlink/dir-640l_firmware < 1.02
dlink/dwr-512_firmware < 2.02
dlink/dwr-712_firmware < 2.02
dlink/dwr-912_firmware < 2.02
dlink/dwr-921_firmware < 2.02
dlink/dwr-111_firmware < 1.01

Timeline

Published Oct 17, 2018
Tracked Since Feb 18, 2026