CVE-2018-10824 Information disclosure in n/a

Critical 9.8 Published 17 Oct 2018 Updated 5 Aug 2024

Attackers can read the plaintext administrative password from a file via directory traversal, gaining full router access.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2018-10824?

CVE-2018-10824 is a critical vulnerability in n/a, published on 17 Oct 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An issue was discovered on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices. The administrative password is stored in plaintext in the /tmp/csman/0 file. An attacker having a directory traversal (or LFI) can easily get full router access.

Weakness: CWE-522, CWE-22

Which versions are affected by CVE-2018-10824?

It affects 8 products.

Products include Dlink Dir-140l Firmware, Dlink Dir-640l Firmware, Dlink Dwr-111 Firmware, Dlink Dwr-116 Firmware, Dlink Dwr-512 Firmware, Dlink Dwr-712 Firmware and 2 more.

How do I fix CVE-2018-10824?

No fix has been published for CVE-2018-10824 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-10824 being exploited?

There is no known exploitation of CVE-2018-10824 in the wild and no public exploit code.

Public exploit code: 1 Exploit-DB entry.

Sources

Also known as GHSA-r34g-3qj4-p82w.