CVE-2018-15516: D-Link Central Wifimanager

Medium severity, CVSS 5.8. EPSS: 2% chance of exploitation in the next 30 days.

The FTP service on D-Link Central WiFiManager CWM-100 1.03 r0098 devices allows remote attackers to conduct a PORT command bounce scan via port 8000, resulting in SSRF.

Affected products

• D-Link Central Wifimanager: version 1.03 only

Published 2019-01-31. Last modified 2026-06-17.