CWE Code: 319
Vulnerability Type: privilege_escalation
CVSS Score: 2.7
CWE Name:  Cleartext Transmission of Sensitive Information
Summary: an issue was discovered on d-link dir-601 2.02na devices. being local to the network and having only "user" account (which is a low privilege account) access, an attacker can intercept the response from a post request to obtain "admin" rights due to the admin password being displayed in xml.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: ADJACENT_NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2018-08-29
Last Modified Date: 2019-10-03