CVE-2018-5708 | BDVDB-2026-98557 Detail

Description#

An issue was discovered on D-Link DIR-601 B1 2.02NA devices. Being on the same local network as, but being unauthenticated to, the administrator's panel, a user can obtain the admin username and cleartext password in the response (specifically, the configuration file restore_default), which is displayed in XML.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.exploit-db.com/exploits/44388/
http://seclists.org/fulldisclosure/2018/Mar/66
https://securityadvisories.dlink.com/announcement/publication.aspx?name=SAP10111

Exploit#

https://www.exploit-db.com/exploits/44388/

History#

Version 12018-03-30Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.