CVE-2017-6411 in DSL-2730U C1

Summary

Cross Site Request Forgery (CSRF) on D-Link DSL-2730U C1 IN_1.00 devices allows remote attackers to change the DNS or firewall configuration or any password.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 03/01/2017
• Disclosure: 03/06/2017
• Moderation: VulDB entry created
• Entries: VDB-97578 (1)
• CPE: ready
• CWE: CWE-352 (Confirmed)
• Exploit: Download
• CVSS: 6.5
• EPSS: 0.02004
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-6411
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-6411
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-6411/