CVE-2014-3136 in DWR-113

Summary

Cross-site request forgery (CSRF) vulnerability in D-Link DWR-113 (Rev. Ax) with firmware before 2.03b02 allows remote attackers to hijack the authentication of administrators for requests that change the admin password via unspecified vectors.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 05/01/2014
• Moderation: VulDB entry created
• Entries: 2
• Relate: show
• CPE: ready
• CWE: CWE-352 (Confirmed)
• Exploit: Download
• CVSS: 7.0
• EPSS: 0.00799
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-3136
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-3136
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-3136/