CVE-2018-10824

An issue was discovered on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices. The administrative password is stored in plaintext in the /tmp/csman/0 file. An attacker having a directory traversal (or LFI) can easily get full router access.

• CWE-22
• CWE-522

• http://sploit.tech/2018/10/12/D-Link.htmlExploit, Third Party Advisory
• https://seclists.org/fulldisclosure/2018/Oct/36Exploit, Mailing List, Third Party Advisory
• http://sploit.tech/2018/10/12/D-Link.htmlExploit, Third Party Advisory
• https://seclists.org/fulldisclosure/2018/Oct/36Exploit, Mailing List, Third Party Advisory

Published

Oct 17, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-10815An issue was discovered in Cloudera Manager before 5.13.4, 5…
• CVE-2018-10817Severalnines ClusterControl before 1.6.0-4699 allows XSS.
• CVE-2018-1082A flaw was found in Moodle 3.4 to 3.4.1, and 3.3 to 3.3.4. I…
• CVE-2018-10821Cross-site scripting (XSS) vulnerability in backend/pages/mo…4.8
• CVE-2018-10822Directory traversal vulnerability in the web interface on D-…7.5
• CVE-2018-10823An issue was discovered on D-Link DWR-116 through 1.06, DWR-…8.8
• CVE-2018-10825Mimo Baby 2 devices do not use authentication or encryption …
• CVE-2018-10827LiteCart before 2.1.2 allows remote attackers to cause a den…
• CVE-2018-10828An issue was discovered in Alps Pointing-device Driver 10.1.…
• CVE-2018-1083Zsh before version 5.4.2-test-1 is vulnerable to a buffer ov…
• CVE-2018-10830In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sy…
• CVE-2018-10831Z-NOMP before 2018-04-05 has an incorrect Equihash solution …