Dwr 111 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:dlink:dwr-111_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Dlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44) |
|---|---|
| Product | Dwr 111 Firmware (26865573-9e4e-582e-91c0-fbac60d38af0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-19300 |
vulnerable | 2026-06-08 05:11:15.600598 |
Details available
On D-Link DAP-1530 (A1) before firmware version 1.06b01, DAP-1610 (A1) before firmware version 1.06b01, DWR-111 (A1) before firmware version 1.02v02, DWR-116 (A1) before firmware version 1.06b03, DWR-512 (B1) before firmware version 2.02b01, DWR-711 (A1) through firmware version 1.11, DWR-712 (B1) before firmware version 2.04b01, DWR-921 (A1) before firmware version 1.02b01, and DWR-921 (B1) before firmware version 2.03b01, there exists an EXCU_SHELL file in the web directory. By sending a GET request with specially crafted headers to the /EXCU_SHELL URI, an attacker could execute arbitrary shell commands in the root context on the affected device. Other devices might be affected as well.
Published: 2019-04-11T15:22:44.000Z
Updated: 2024-08-05T11:30:04.205Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10824 |
vulnerable | 2026-06-08 05:10:37.145741 |
Details available
An issue was discovered on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices. The administrative password is stored in plaintext in the /tmp/csman/0 file. An attacker having a directory traversal (or LFI) can easily get full router access.
Published: 2018-10-17T14:00:00.000Z
Updated: 2024-08-05T07:46:46.962Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10823 |
vulnerable | 2026-06-08 05:10:37.145016 |
Details available
An issue was discovered on D-Link DWR-116 through 1.06, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices. An authenticated attacker may execute arbitrary code by injecting the shell command into the chkisg.htm page Sip parameter. This allows for full control over the device internals.
Published: 2018-10-17T14:00:00.000Z
Updated: 2024-08-05T07:46:47.451Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10822 |
vulnerable | 2026-06-08 05:10:37.143763 |
Details available
Directory traversal vulnerability in the web interface on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices allows remote attackers to read arbitrary files via a /.. or // after "GET /uir" in an HTTP request. NOTE: this vulnerability exists because of an incorrect fix for CVE-2017-6190.
Published: 2018-10-17T14:00:00.000Z
Updated: 2024-08-05T07:46:47.301Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.