CVE-2018-15515 | BDVDB-2026-112351 Detail

Description#

The CaptivelPortal service on D-Link Central WiFiManager CWM-100 1.03 r0098 devices will load a Trojan horse "quserex.dll" from the CaptivelPortal.exe subdirectory under the D-Link directory, which allows unprivileged local users to gain SYSTEM privileges.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://seclists.org/fulldisclosure/2018/Nov/29
http://packetstormsecurity.com/files/150244/D-LINK-Central-WifiManager-CWM-100-1.03-r0098-DLL-Hijacking.html

Exploit#

No public exploit known

History#

Version 12019-01-31Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.