CVE-2017-12943 D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/__show_info.php?REQUIRE_FILE= absolute path traversal attack, as demonstrated by discovering the a...
CriticalCVSS 9.8
EPSS 39.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/__show_info.php?REQUIRE_FILE= absolute path traversal attack, as demonstrated by discovering the admin password.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dlink dir-600 b1 firmware | = 2.01 | No fix listed |
References
- jithindkurup.tumblr.com third-party-advisory
- 42581 exploit third-party-advisory vdb-entry
- www.youtube.com exploit third-party-advisory