CVE-2017-5874

CSRF exists on D-Link DIR-600M Rev. Cx devices before v3.05ENB01_beta_20170306. This can be used to bypass authentication and insert XSS sequences or possibly have unspecified other impact.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2017-03-22

Last modified

2024-08-05

Weaknesses

CWE-352

Affected products

• Dir-600m Firmware (D-link)

References

• http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10072
• http://www.securityfocus.com/bid/96999