CVE-2018-9032

Name of the Vulnerable Software and Affected Versions D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router (Hardware Version: A1, B1; Firmware Version: 1.02 through 2.06)

Description The issue allows attackers to bypass the SharePort Web Access Portal. This can be achieved by directly visiting "category view.php" or "folder view.php" API endpoints.

Recommendations For Firmware Version 1.02 through 2.06, update to a newer version that contains a fix for this issue. As a temporary workaround, consider restricting access to the "category view.php" and "folder view.php" API endpoints until a patch is available.