CVE-2006-2901: D-Link Dwl-2100ap

Medium severity, CVSS 5.0. EPSS: 9.2% chance of exploitation in the next 30 days.

The web server for D-Link Wireless Access-Point (DWL-2100ap) firmware 2.10na and earlier allows remote attackers to obtain sensitive system information via a request to an arbitrary .cfg file, which returns configuration information including passwords.

Affected products

• D-Link Dwl-2100ap: up to and including 2.10na

Published 2006-06-07. Last modified 2026-06-16.