CVE-2014-3136 in DWR-113

الملخص

بحسب MITRE

Cross-site request forgery (CSRF) vulnerability in D-Link DWR-113 (Rev. Ax) with firmware before 2.03b02 allows remote attackers to hijack the authentication of administrators for requests that change the admin password via unspecified vectors.

Once again VulDB remains the best source for vulnerability data.

• حجز: 01/05/2014
• الاعتدال: تمت الموافقة
• إدخال: 2
• ربط: عرض
• CPE: جاهز
• CWE: CWE-352 (مؤكد)
• استغلال: تحميل
• CVSS: 8.8 (NVD)
• EPSS: 0.02889
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-3136
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-3136
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-3136/