CVE-2018-6212: XSS
On D-Link DIR-620 devices with a certain customized (by ISP) variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, and 2.0.22, a reflected Cross-Site Scripting (XSS) attack is possible as a result of missed filtration for special characters in the "Search" field and incorrect processing of the XMLHttpRequest object.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-6212?
CVE-2018-6212 has been classified with a medium severity level due to its potential to allow reflected Cross-Site Scripting (XSS) attacks.
How do I fix CVE-2018-6212?
To remediate CVE-2018-6212, update the D-Link DIR-620 firmware to a version that is not affected by this vulnerability.
What are the affected firmware versions for CVE-2018-6212?
CVE-2018-6212 affects D-Link DIR-620 firmware versions 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, and 2.0.22.
What type of attack is possible with CVE-2018-6212?
CVE-2018-6212 allows for a reflected Cross-Site Scripting (XSS) attack due to inadequate filtration of special characters.
Can CVE-2018-6212 be exploited remotely?
Yes, CVE-2018-6212 can be exploited remotely through the affected D-Link DIR-620 devices by attackers using XSS techniques.