CVE-2018-15515

published 2019-01-31

CVE-2018-15515: The CaptivelPortal service on D-Link Central WiFiManager CWM-100 1.03 r0098 devices will load a Trojan horse "quserex.dll" from the CaptivelPortal.exe…

high 7.8 CVSS 3.0

AV L AC L PR L UI N S U C H I H A H

The CaptivelPortal service on D-Link Central WiFiManager CWM-100 1.03 r0098 devices will load a Trojan horse "quserex.dll" from the CaptivelPortal.exe subdirectory under the D-Link directory, which allows unprivileged local users to gain SYSTEM privileges.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
dlink	central_wifimanager	—	—