CVE-2018-10618

Critical

Description

Davolink DVW-3200N all version prior to Version 1.00.06. The device generates a weak password hash that is easily cracked, allowing a remote attacker to obtain the password for the device.

SeverityCritical
CVSS9.8
Exploit probability—
ProductDavolink Dvw-3200n Firmware
PublishedAug 1, 2018
First seenAug 1, 2018
Weakness typeCWE-916CWE-916

How to fix

Update
  • davolink dvw-3200n_firmware1.00.06 or later

Affected products

ProductAffected versionsFixed in
davolink dvw-3200n_firmwarev < 1.00.061.00.06

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.