cbcvebase.
CVE-2018-18008
published 2018-12-21

CVE-2018-18008: spaces.htm on multiple D-Link devices (DSL, DIR, DWR) allows remote unauthenticated attackers to discover admin credentials.

PriorityP265critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EPSS
1.99%
78.3th percentile
spaces.htm on multiple D-Link devices (DSL, DIR, DWR) allows remote unauthenticated attackers to discover admin credentials.

Affected

25 ranges
VendorProductVersion rangeFixed in
dlinkdir-140l_firmware——
dlinkdir-140l_firmware——
dlinkdir-140l_firmware——
dlinkdir-640l_firmware——
dlinkdir-640l_firmware——
dlinkdir-640l_firmware——
dlinkdsl-2770l_firmware——
dlinkdsl-2770l_firmware——
dlinkdsl-2770l_firmware——
dlinkdwr-116_firmware——
dlinkdwr-116_firmware——
dlinkdwr-116_firmware——
dlinkdwr-116_firmware——
dlinkdwr-512_firmware——
dlinkdwr-512_firmware——
dlinkdwr-512_firmware——
dlinkdwr-512_firmware——
dlinkdwr-555_firmware——
dlinkdwr-555_firmware——
dlinkdwr-555_firmware——
dlinkdwr-555_firmware——
dlinkdwr-921_firmware——
dlinkdwr-921_firmware——
dlinkdwr-921_firmware——
dlinkdwr-921_firmware——

CVSS provenance

nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.