CVE-2018-19300

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

74.28% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 99.4% of scored records. A rank, not a probability.

NVD base score

9.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2019-04-11 15:22Z7 YR AGO

Last updated

2024-08-05 11:30Z2 YR AGO

Reserved

2018-11-15

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

• CWE-20Improper Input ValidationClass

Data version

5.1

Document digest

dcf88a6f083ecf2d3d7f90bb7af666a24101e10526c17c0e5d3e8e50ef8d9a2c

• www.greenbone.nethttps://www.greenbone.net/schwerwiegende-sicherheitsluecke-in-d-link-routern-entdeckt/x_refsource_MISC
• community.greenbone.nethttps://community.greenbone.net/t/cve-2018-19300-remote-command-execution-vulnerability-in-d-link-dwr-and-dap-routers/1772x_refsource_MISC
• eu.dlink.comhttps://eu.dlink.com/de/de/support/support-news/2019/march/19/remote-command-execution-vulnerability-in-d-link-dwr-and-dap-routersx_refsource_CONFIRM
• www.greenbone.nethttps://www.greenbone.net/en/serious-vulnerability-discovered-in-d-link-routers/x_refsource_MISC