CVE-2018-12710
High · 8.0CVSS
8.0
EPSS
76.5%
Published
Aug 29, 2018
CISA due date
—
The record
An issue was discovered on D-Link DIR-601 2.02NA devices. Being local to the network and having only "User" account (which is a low privilege account) access, an attacker can intercept the response from a POST request to obtain "Admin" rights due to the admin password being displayed in XML.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-81330 The C6 ear camera transmits live video to the EarVision Android application over… CWE-319
- CVE-2026-87482 Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS… CWE-319
- CVE-2026-79588 U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of… CWE-319
- CVE-2026-71216 PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. CWE-319
- CVE-2026-84381 HTTPX2 is a next generation HTTP client for Python. CWE-319
- CVE-2026-84366 Scrapy is a high-level web crawling and scraping framework for Python. CWE-319
- CVE-2026-73756 A vulnerability in an API endpoint of AOS-CX could allow a remote unauthenticated… CWE-319
- CVE-2026-73743 A vulnerability in the web-based management interface of HPE Networking Fabric Composer… CWE-319