CVE-2018-12710

8.0 highEPSS 77%

High (8.0) in dlink dir-601 firmware. EPSS 77% chance of exploitation in the next 30 days.

An issue was discovered on D-Link DIR-601 2.02NA devices. Being local to the network and having only "User" account (which is a low privilege account) access, an attacker can intercept the response from a POST request to obtain "Admin" rights due to the admin password being displayed in XML.

Severity

CVSS 3.0

8.0 high

CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 77% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE: CWE-319
Published: 2018-08-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dlink:dir-601_firmware

References

http://seclists.org/fulldisclosure/2018/Aug/45
https://www.exploit-db.com/exploits/45306/
http://seclists.org/fulldisclosure/2018/Aug/45
https://www.exploit-db.com/exploits/45306/

Check your stack JSON