CVE-2013-2271

The D-Link DSL-2740B Gateway with firmware EU_1.0, when an active administrator session exists, allows remote attackers to bypass authentication and gain administrator access via a request to login.cgi.

Score

CVSS 2.0 7.6 High

Status

Modified - cve@mitre.org

Published

2013-11-19

Last modified

2024-09-16

Weaknesses

CWE-264

Affected products

• Dsl-2740b (Dlink)
• Dsl-2740b Firmware (Dlink)

References

• http://packetstormsecurity.com/files/120613/dlinkdsl2740b-bypass.txt
• http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10004
• http://www.webapp-security.com/2013/03/d-link-dsl-2740b-adsl-router-authentication-bypass
• http://www.webapp-security.com/wp-content/uploads/2013/03/D-Link-DSL-2740B-ADSL-Router-Authentication-Bypass2.txt