CVE-2018-12710

published 2018-08-29

CVE-2018-12710: An issue was discovered on D-Link DIR-601 2.02NA devices. Being local to the network and having only "User" account (which is a low privilege account) access…

high 8 CVSS 3.0

AV A AC L PR L UI N S U C H I H A H

EXPLOIT

An issue was discovered on D-Link DIR-601 2.02NA devices. Being local to the network and having only "User" account (which is a low privilege account) access, an attacker can intercept the response from a POST request to obtain "Admin" rights due to the admin password being displayed in XML.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
dlink	dir-601_firmware	—	—

CWE-319