VULNERABILITY INTELLIGENCE

CVE-2006-2901

CVSS score5 MEDIUM
EPSS probability9.21%
CISA KEVNot currently listed
Published2006-06-07
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

The web server for D-Link Wireless Access-Point (DWL-2100ap) firmware 2.10na and earlier allows remote attackers to obtain sensitive system information via a request to an arbitrary .cfg file, which returns configuration information including passwords.

Primary references