CVE-2018-18007

atbox.htm on D-Link DSL-2770L devices allows remote unauthenticated attackers to discover admin credentials.
References
Link Resource
http://seclists.org/fulldisclosure/2018/Dec/38 Mailing List Third Party Advisory
http://www.securityfocus.com/bid/106337 Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2018/Dec/38 Mailing List Third Party Advisory
http://www.securityfocus.com/bid/106337 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:dlink:dsl-2770l_firmware:me_1.01:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dsl-2770l_firmware:me_1.02:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dsl-2770l_firmware:me_1.06:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dsl-2770l:-:*:*:*:*:*:*:*

History

21 Nov 2024, 03:55

Type Values Removed Values Added
References () http://seclists.org/fulldisclosure/2018/Dec/38 - Mailing List, Third Party Advisory () http://seclists.org/fulldisclosure/2018/Dec/38 - Mailing List, Third Party Advisory
References () http://www.securityfocus.com/bid/106337 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/106337 - Third Party Advisory, VDB Entry

Information

Published : 2018-12-21 23:29

Updated : 2024-11-21 03:55


NVD link : CVE-2018-18007

Mitre link : CVE-2018-18007

CVE.ORG link : CVE-2018-18007


JSON object : View

Products Affected

dlink

  • dsl-2770l
  • dsl-2770l_firmware
CWE
CWE-798

Use of Hard-coded Credentials