Vulnerability Report

CVE-2006-2901

Title: D-Link Dwl-2100Ap

Other

Proof Of Concept

PoC Available for CVE-2006-2901

CWE Category NVD-CWE-noinfo

Published Date Jun 07, 2006

Modified Date Jun 16, 2026

Exploit Status Available

Score 5.0 CVSS v2.0

Exploit Probability (EPSS)

9.22%

Vulnerability Summary

CVE-2006-2901: The web server for D-Link Wireless Access-Point (DWL-2100ap) firmware 2.10na and earlier allows remote attackers to obtain sensitive system information via a request to an arbitrary .cfg file, which returns configuration information including passwords.

Impacted Vendors

d-link 1

Reference Links

http://secunia.com/advisories/20474 http://securityreason.com/securityalert/1064 http://securitytracker.com/id?1016234 http://www.gnucitizen.org/projects/router-hacking-challenge/ http://www.intruders.com.br/adv0206en.html http://www.intruders.org.br/adv0206en.html http://www.securityfocus.com/archive/1/436281/100/0/threaded http://www.securityfocus.com/archive/1/489009/100/0/threaded http://www.securityfocus.com/bid/18299 http://www.vupen.com/english/advisories/2006/2186 https://exchange.xforce.ibmcloud.com/vulnerabilities/26973 http://secunia.com/advisories/20474 http://securityreason.com/securityalert/1064 http://securitytracker.com/id?1016234 http://www.gnucitizen.org/projects/router-hacking-challenge/ http://www.intruders.com.br/adv0206en.html http://www.intruders.org.br/adv0206en.html http://www.securityfocus.com/archive/1/436281/100/0/threaded http://www.securityfocus.com/archive/1/489009/100/0/threaded http://www.securityfocus.com/bid/18299 http://www.vupen.com/english/advisories/2006/2186 https://exchange.xforce.ibmcloud.com/vulnerabilities/26973

CVSS v2.0

Source Entity [email protected]

Severity MEDIUM

5.0

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:L/Au:N/C:P/I:N/A:N

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2006-2901 Exploits & PoCs (Proof Of Concept)

Exploit-DB https://www.exploit-db.com/exploits/1889

View Code

June 16, 2026 MODIFIED

Vulnerability data updated via NVD.

April 03, 2025 MODIFIED

Vulnerability data or affected products updated.

June 07, 2006 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected Stack

No specific products linked.