Is CVE-2018-18441 actively exploited?

CVE-2018-18441 has no public evidence of in-the-wild exploitation as of 2024-11-21.

What is the CVSS score for CVE-2018-18441?

CVE-2018-18441 has a CVSS score of 7.5 (HIGH severity). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

How do I patch CVE-2018-18441?

Patch guidance is available from d-link security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2018-18441.

Fix CVE-2018-18441 - HIGH d-link dcs-936l firmware

Q: Which products are affected by CVE-2018-18441?

19 products: d-link dcs-936l firmware, dlink dcs-942l firmware, d-link dcs-8000lh firmware, d-link dcs-942lb1 firmware, d-link dcs-5222l firmware, and 14 more.

Description

D-Link DCS series Wi-Fi cameras expose sensitive information regarding the device configuration. The affected devices include many of DCS series, such as: DCS-936L, DCS-942L, DCS-8000LH, DCS-942LB1, DCS-5222L, DCS-825L, DCS-2630L, DCS-820L, DCS-855L, DCS-2121, DCS-5222LB1, DCS-5020L, and many more. There are many affected firmware versions starting from 1.00 and above. The configuration file can be accessed remotely through: <Camera-IP>/common/info.cgi, with no authentication. The configuration file include the following fields: model, product, brand, version, build, hw_version, nipca version, device name, location, MAC address, IP address, gateway IP address, wireless status, input/output settings, speaker, and sensor settings.

CVSS Metrics

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector: network
Complexity: low
Privileges: none
User Action: none
Scope: unchanged
Confidentiality: high
Integrity: none
Availability: none
Weaknesses: CWE-200 · Information Disclosure

Metadata

Primary Vendor: D-LINK
Published: 12/20/2018
Last Modified: 11/21/2024
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

d-link : dcs-936l_firmwaredlink : dcs-942l_firmwared-link : dcs-8000lh_firmwared-link : dcs-942lb1_firmwared-link : dcs-5222l_firmwared-link : dcs-825l_firmwared-link : dcs-2630l_firmwared-link : dcs-820l_firmwared-link : dcs-855l_firmwared-link : dcs-2121_firmwared-link : dcs-5222lb1_firmwaredlink : dcs-5020l_firmwaredlink : dcs-930l_firmwared-link : dcs-8100lh_firmwaredlink : dcs-932l_firmwared-link : dcs-2102_firmwared-link : dcs-942lb1_firmwaredlink : dcs-933l_firmwaredlink : dcs-5030l_firmware

Remediation Guidance

Executive Summary

View on NIST NVD