CVE-2018-10822
CVE-2018-10822
Vexday Risk Score
50Attention
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Functional exploit
Automatable exploit available (Nuclei/Metasploit).
CVSS —EPSS 39.3%KEV nãoPoC públicaNuclei simMetasploit —Patch —
Lifecycle
12 Oct 2018Public PoC
17 Oct 2018Published on NVD
Recommendation: Plan a near-term fix — a public PoC already exists.
Directory traversal vulnerability in the web interface on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices allows remote attackers to read arbitrary files via a /.. or // after "GET /uir" in an HTTP request. NOTE: this vulnerability exists because of an incorrect fix for CVE-2017-6190.
Affected products
n/a · n/apublic PoCs found — 1
exploitdbwww.exploit-db.com/exploits/45678unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.