CVE-2018-15516

PoC ×3—

CVSS 3.0

5.8 medium

EPSS

2%p80

Published

Jan 31, 2019 (Jan 31, 2019)

Modified

Jun 17, 2026

Description

The FTP service on D-Link Central WiFiManager CWM-100 1.03 r0098 devices allows remote attackers to conduct a PORT command bounce scan via port 8000, resulting in SSRF.

Vendors: dlink
Products: central wifimanager
Weakness: CWE-918
Vector: CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (2.0%)

In the news0 stories

No ingested article mentions this CVE yet.