CVE-2002-1810

Published: Dec 31, 2002Modified: Apr 16, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

D-Link DWL-900AP+ Access Point 2.1 and 2.2 allows remote attackers to access the TFTP server without authentication and read the config.img file, which contains sensitive information such as the administrative password, the WEP encryption keys, and network configuration information.

Affected (2)

Products: Dlink: Dwl 900ap+ Firmware

1 product

Dwl 900ap+ Firmware

Configuration A

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dwl 900ap+ Firmware	Version 2.1
Dlink Dwl 900ap+ Firmware	Version 2.2

Running on/with	Platform Versions
Dlink Dwl 900ap+	All versions

Related CWEs

Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (6)

http://online.securityfocus.com/archive/1/296374

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.iss.net/security_center/static/10424.php

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/bid/6015

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://online.securityfocus.com/archive/1/296374

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryVDB Entry

http://www.iss.net/security_center/static/10424.php

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.securityfocus.com/bid/6015

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryVDB Entry

Timeline

No history available yet.