D-Link Central WifiManager 1.03 R0098
Approved changes feed: RSS · Atom
cpe:2.3:a:dlink:central_wifimanager:1.03:r0098:*:*:*:*:*:*
part: a version: 1.03 update: r0098
| Vendor | Dlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44) |
|---|---|
| Product | Central Wifimanager (3977d169-93bc-535a-bea7-545a3442f3a3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-15517 |
vulnerable | 2026-06-08 05:10:54.968494 |
Details available
The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an SMTP server but actually allows outbound TCP to any port on any IP address, leading to SSRF, as demonstrated by an index.php/System/MailConnect/host/127.0.0.1/port/22/secure/ URI.
Published: 2019-01-31T19:00:00.000Z
Updated: 2024-08-05T09:54:03.474Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15516 |
vulnerable | 2026-06-08 05:10:54.968058 |
Details available
The FTP service on D-Link Central WiFiManager CWM-100 1.03 r0098 devices allows remote attackers to conduct a PORT command bounce scan via port 8000, resulting in SSRF.
Published: 2019-01-31T19:00:00.000Z
Updated: 2024-08-05T09:54:03.535Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.