D-Link DSL-2770l Firmware vulnerabilities

2 CVEs affecting D-Link DSL-2770l Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-18008, published 2018-12-21.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-18008, published 2018-12-21. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. spaces.htm on multiple D-Link devices (DSL, DIR, DWR) allows remote unauthenticated attackers to discover admin credentials.
• CVE-2018-18007, published 2018-12-21. Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days. atbox.htm on D-Link DSL-2770L devices allows remote unauthenticated attackers to discover admin credentials.