CVE-2018-10822: Path Traversal
Directory traversal vulnerability in the web interface on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices allows remote attackers to read arbitrary files via a /.. or // after "GET /uir" in an HTTP request. NOTE: this vulnerability exists because of an incorrect fix for CVE-2017-6190.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-10822?
CVE-2018-10822 is rated as a medium severity vulnerability, allowing unauthorized file access.
How do I fix CVE-2018-10822?
To mitigate CVE-2018-10822, upgrade the affected D-Link devices to the latest firmware versions provided by D-Link.
What devices are affected by CVE-2018-10822?
CVE-2018-10822 affects several D-Link devices including DWR-116, DIR-140L, DIR-640L, DWR-512, DWR-712, DWR-912, DWR-921, and DWR-111 running specific firmware versions.
What type of attack does CVE-2018-10822 facilitate?
CVE-2018-10822 facilitates a directory traversal attack, which allows remote attackers to access arbitrary files on the impacted devices.
Is a workaround available for CVE-2018-10822?
There is no known workaround for CVE-2018-10822, therefore it's crucial to update the firmware to remediate the vulnerability.