CVE-2002-1810

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2002-1810
D-Link DWL-900AP+ Access Point 2.1 and 2.2 allows remote attackers to access the TFTP server without authentication and read the config.img file, which contains sensitive information such as the administrative password, the WEP encryption keys, and network configuration information.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

7.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://online.securityfocus.com/archive/1/296374 Broken Link Third Party Advisory VDB Entry
http://www.iss.net/security_center/static/10424.php Broken Link
http://www.securityfocus.com/bid/6015 Broken Link Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:dlink:dwl-900ap\+_firmware:2.1:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dwl-900ap\+_firmware:2.2:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dwl-900ap\+:-:*:*:*:*:*:*:*
History

14 Feb 2024, 17:25

Type Values Removed Values Added
CVSS v2 : 7.5
v3 : unknown 		v2 : 7.5
v3 : 7.5
CWE NVD-CWE-Other CWE-306
First Time Dlink
Dlink dwl-900ap\+ Firmware
Dlink dwl-900ap\+
References () http://online.securityfocus.com/archive/1/296374 - () http://online.securityfocus.com/archive/1/296374 - Broken Link, Third Party Advisory, VDB Entry
References () http://www.iss.net/security_center/static/10424.php - () http://www.iss.net/security_center/static/10424.php - Broken Link
References () http://www.securityfocus.com/bid/6015 - () http://www.securityfocus.com/bid/6015 - Broken Link, Third Party Advisory, VDB Entry
CPE cpe:2.3:h:d-link:dwl-900ap\+:2.2:*:*:*:*:*:*:*
cpe:2.3:h:d-link:dwl-900ap\+:2.1:*:*:*:*:*:*:*		 cpe:2.3:h:dlink:dwl-900ap\+:-:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dwl-900ap\+_firmware:2.2:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dwl-900ap\+_firmware:2.1:*:*:*:*:*:*:*
Information

Published : 2002-12-31 05:00

Updated : 2024-02-14 17:25

NVD link : CVE-2002-1810

Mitre link : CVE-2002-1810

CVE.ORG link : CVE-2002-1810

JSON object : View

Products Affected

dlink

  • dwl-900ap\+_firmware
  • dwl-900ap\+
CWE
CWE-306

Missing Authentication for Critical Function