VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Dec 21, 2018· Updated Jun 17, 2026

CVE-2018-18008

CVE-2018-18008

Description

spaces.htm on multiple D-Link devices (DSL, DIR, DWR) allows remote unauthenticated attackers to discover admin credentials.

Affected products

28
  • Dlink/Dsl 2770l Firmware3 versions
    cpe:2.3:o:dlink:dsl-2770l_firmware:me_1.01:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:dlink:dsl-2770l_firmware:me_1.01:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dsl-2770l_firmware:me_1.02:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dsl-2770l_firmware:me_1.06:*:*:*:*:*:*:*
  • Dlink/Dir 140l Firmware3 versions
    cpe:2.3:o:dlink:dir-140l_firmware:1.00:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:dlink:dir-140l_firmware:1.00:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dir-140l_firmware:1.01ru:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dir-140l_firmware:1.02:*:*:*:*:*:*:*
  • Dlink/Dir 640l Firmware3 versions
    cpe:2.3:o:dlink:dir-640l_firmware:1.00:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:dlink:dir-640l_firmware:1.00:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dir-640l_firmware:1.01ru:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dir-640l_firmware:1.02:*:*:*:*:*:*:*
  • Dlink/Dwr 116 Firmware4 versions
    cpe:2.3:o:dlink:dwr-116_firmware:1.03:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:dlink:dwr-116_firmware:1.03:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dwr-116_firmware:1.05:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dwr-116_firmware:2.01:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dwr-116_firmware:2.02:*:*:*:*:*:*:*
  • Dlink/Dwr 512 Firmware4 versions
    cpe:2.3:o:dlink:dwr-512_firmware:1.03:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:dlink:dwr-512_firmware:1.03:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dwr-512_firmware:1.05:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dwr-512_firmware:2.01:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dwr-512_firmware:2.02:*:*:*:*:*:*:*
  • Dlink/Dwr 555 Firmware4 versions
    cpe:2.3:o:dlink:dwr-555_firmware:1.03:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:dlink:dwr-555_firmware:1.03:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dwr-555_firmware:1.05:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dwr-555_firmware:2.01:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dwr-555_firmware:2.02:*:*:*:*:*:*:*
  • Dlink/Dwr 921 Firmware4 versions
    cpe:2.3:o:dlink:dwr-921_firmware:1.03:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:dlink:dwr-921_firmware:1.03:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dwr-921_firmware:1.05:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dwr-921_firmware:2.01:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dwr-921_firmware:2.02:*:*:*:*:*:*:*
  • Dlink/DSLllm-create
  • Dlink/DIRllm-create
  • Dlink/DWRllm-create

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.