Remote Information Disclosure in D-Link Wireless Access Point

CVE-2006-2901

Summary

The D-Link Wireless Access Point, specifically the DWL-2100ap with firmware version 2.10na and prior, is susceptible to a remote information disclosure vulnerability. This security flaw allows an attacker to gain unauthorized access to sensitive system information by sending requests to arbitrary configuration (.cfg) files, which can reveal critical data including passwords and other configuration settings. Such exposure can lead to unauthorized management of the device, posing risks to the security and integrity of the network.

References