CVE-2002-1810: High severity D-Link Dwl-900ap\+ vulnerability
D-Link DWL-900AP+ Access Point 2.1 and 2.2 allows remote attackers to access the TFTP server without authentication and read the config.img file, which contains sensitive information such as the administrative password, the WEP encryption keys, and network configuration information.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable the TFTP server on the D-Link DWL-900AP+ to prevent unauthenticated remote access to the device's config.img file.
D-Link DWL-900AP+ TFTP server tftp_enabled = false - Compensating control
Block or restrict UDP port 69 (TFTP) to/from D-Link DWL-900AP+ devices at network perimeter firewalls or via access-control lists; permit TFTP only from trusted management hosts if required.
- Operational
Assume config.img contents may have been exposed; rotate administrative passwords and replace WEP encryption keys and any other credentials or sensitive settings contained in config.img on all affected D-Link DWL-900AP+ devices.
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1810?
The severity of CVE-2002-1810 is considered high due to the potential exposure of sensitive configuration data.
How does CVE-2002-1810 impact D-Link DWL-900AP+ Access Point users?
CVE-2002-1810 allows remote attackers to access the TFTP server without authentication, compromising device security.
How do I fix CVE-2002-1810?
To fix CVE-2002-1810, update the firmware of your D-Link DWL-900AP+ to the latest version that addresses this vulnerability.
Are all versions of the D-Link DWL-900AP+ affected by CVE-2002-1810?
No, only D-Link DWL-900AP+ versions 2.1 and 2.2 are affected by CVE-2002-1810.
What sensitive information can be exposed due to CVE-2002-1810?
CVE-2002-1810 can expose sensitive information such as the administrative password, WEP encryption keys, and network configuration details.