CVE-2014-3136

Published: Dic 27, 2019 Last Modified: Nov 21, 2024 EU-VD ID: EUVD-2014-3156 Aliases: GSD-2014-3136

ExploitDB:

Other exploit source:

Google Dorks:

HIGH 8,8

Source: [email protected]

Attack Vector: network

Attack Complexity: low

Privileges Required: none

User Interaction: required

Scope: unchanged

Confidentiality: high

Integrity: high

Availability: high

MEDIUM 6,8

Source: [email protected]

Access Vector: network

Access Complexity: medium

Authentication: none

Confidentiality: partial

Integrity: partial

Availability: partial

Description

AI Translation Available

Cross-site request forgery (CSRF) vulnerability in D-Link DWR-113 (Rev. Ax) with firmware before 2.03b02 allows remote attackers to hijack the authentication of administrators for requests that change the admin password via unspecified vectors.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score

0,0085

Percentile

0,7th

Updated

EPSS Score Trend (Last 91 Days)

352

Cross-Site Request Forgery (CSRF)

Stable

Abstraction: Compound Structure: Composite

Common Consequences

Security Scopes Affected:

Confidentiality Integrity Availability Non-Repudiation Access Control

Potential Impacts:

Gain Privileges Or Assume Identity Bypass Protection Mechanism Read Application Data Modify Application Data Dos: Crash, Exit, Or Restart

Applicable Platforms

Technologies: Web Based, Web Server

Likelihood of Exploit: Medium

View CWE Details

Exploit

D-Link DWR-113 Rev. Ax - Cross-Site Request Forgery …

D-Link DWR-113 Rev. Ax - Cross-Site Request Forgery / Denial of Service

Author: Blessen Thomas Published:

View Exploit Code →

Operating System

Dwr-113 Firmware by Dlink

Product Information

Vendor Dlink

Product Dwr-113 Firmware

Version Range Affected

To 2.03b02 (exclusive)

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:dlink:dwr-113_firmware:*:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

https://exchange.xforce.ibmcloud.com/vulnerabilities/95022