CVE-2018-12710

An issue was discovered on D-Link DIR-601 2.02NA devices

published August 29, 2018

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.5th percentile for exploit probability.

CVSS
—
EPSS
77%
Percentile
99.5
In the wild
Unconfirmed
What it is

An issue was discovered on D-Link DIR-601 2.02NA devices. Being local to the network and having only "User" account (which is a low privilege account) access, an attacker can intercept the response from a POST request to obtain "Admin" rights due to the admin password being displayed in XML.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.76507 · 99.5th percentile
Published
2018-08-29T19:00Z
EPSS history
Timeline
  • 22 SEP 03:15Z
    EPSS moved 77% → 57%
    epss
  • 06 SEP 03:11Z
    EPSS moved 77% → 57%
    epss
  • 30 AUG 16:00Z
    EPSS moved 57% → 77%
    epss
  • 29 AUG 04:32Z
    EPSS moved 77% → 57%
    epss
  • 29 AUG 19:00Z
    An issue was discovered on D-Link DIR-601 2.02NA devices
    cvelistv5