CVE-2018-10822

published 2018-10-17

CVE-2018-10822: Directory traversal vulnerability in the web interface on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

EXPLOIT

Directory traversal vulnerability in the web interface on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices allows remote attackers to read arbitrary files via a /.. or // after "GET /uir" in an HTTP request. NOTE: this vulnerability exists because of an incorrect fix for CVE-2017-6190.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
dlink	dir-140l_firmware	<= 1.02	—
dlink	dir-640l_firmware	<= 1.02	—
dlink	dwr-111_firmware	<= 1.01	—
dlink	dwr-116_firmware	<= 1.06	—
dlink	dwr-512_firmware	<= 2.02	—
dlink	dwr-712_firmware	<= 2.02	—
dlink	dwr-912_firmware	<= 2.02	—
dlink	dwr-921_firmware	<= 2.02	—

CWE-22