← All advisories

Critical severity9.8NVD Advisory· Published Dec 21, 2018· Updated Jun 17, 2026

CVE-2018-18009

CVE-2018-18009

Description

dirary0.js on D-Link DIR-140L, DIR-640L devices allows remote unauthenticated attackers to discover admin credentials.

Affected products

4

Dlink/Dir 140l Firmware
cpe:2.3:o:dlink:dir-140l_firmware:1.02:*:*:*:*:*:*:*
Dlink/Dir 640l Firmware
cpe:2.3:o:dlink:dir-640l_firmware:1.01ru:*:*:*:*:*:*:*
Dlink/DIR-140Lllm-create
Dlink/DIR-640Lllm-create

Patches

Vulnerability mechanics

References

2

seclists.org/fulldisclosure/2018/Dec/46nvdMailing ListThird Party Advisory
www.securityfocus.com/bid/106336nvdThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.