Description
Certain models of D-Link wireless routers have a path traversal vulnerability. Unauthenticated attackers on the same local area network can read arbitrary system files by manipulating the URL.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
D-Link G403
Default version status: unaffected
earlier to < 1.10.01affected
D-Link G415
Default version status: unaffected
earlier to < 1.10.01affected
D-Link G416
Default version status: unaffected
earlier to < 1.10.01affected
D-Link M18
Default version status: unaffected
earlier to < 1.10.01affected
D-Link R03
Default version status: unaffected
earlier to < 1.10.01affected
D-Link R04
Default version status: unaffected
earlier to < 1.10.01affected
D-Link R12
Default version status: unaffected
earlier to < 1.10.01affected
D-Link R18
Default version status: unaffected
earlier to < 1.10.01affected
D-Link E30
Default version status: unaffected
earlier to < 1.10.02affected
D-Link M30
Default version status: unaffected
earlier to < 1.10.02affected
D-Link M32
Default version status: unaffected
earlier to < 1.10.02affected
D-Link M60
Default version status: unaffected
earlier to < 1.10.02affected
D-Link R32
Default version status: unaffected
earlier to < 1.10.02affected
D-Link E15
Default version status: unaffected
earlier to < 1.20.01affected
D-Link R15
Default version status: unaffected
earlier to < 1.20.01affected