CVE-2014-3136 in DWR-113

Riassunto

di MITRE

Cross-site request forgery (CSRF) vulnerability in D-Link DWR-113 (Rev. Ax) with firmware before 2.03b02 allows remote attackers to hijack the authentication of administrators for requests that change the admin password via unspecified vectors.

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 01/05/2014
• Moderazione: accettato
• Voce: 2
• Collegare: mostrare
• CPE: pronto
• CWE: CWE-352 (confermato)
• Sfruttamento: Scaricare
• CVSS: 8.8 (NVD)
• EPSS: 0.02889
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-3136
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-3136
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-3136/