Directory Traversal Vulnerability in D-Link Routers

CVE-2018-10824

Summary

A vulnerability exists in multiple D-Link router models where the administrative password is stored in plaintext in a specific directory. This configuration flaw allows an attacker to exploit a directory traversal or local file inclusion (LFI) to gain unauthorized access to sensitive router credentials, potentially leading to full control over the device. Users of affected models should take immediate steps to secure their devices to prevent exploitation.

References