Details of VAR-201312-0537

ID

VAR-201312-0537

TITLE

D-Link DSL-2750U Cross-Site Request Forgery Vulnerability

Trust: 1.2

sources: CNVD: CNVD-2014-00055 // CNNVD: CNNVD-201401-411

DESCRIPTION

The D-Link DSL-2750U is a DSL router device. Allows remote attackers to exploit vulnerabilities to build malicious URIs, entice users to resolve, and perform malicious actions in the context of the target user. D-Link DSL-2750U is a wireless router and ADSL broadband cat all-in-one product from D-Link. A cross-site request forgery vulnerability exists in D-Link DSL-2750U. Attackers can use this vulnerability to perform management operations and gain access to affected devices. Other forms of attacks may also exist

Trust: 1.35

sources: CNVD: CNVD-2014-00055 // CNNVD: CNNVD-201401-411 // BID: 64629

IOT TAXONOMY

category:

['IoT', 'Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2014-00055

AFFECTED PRODUCTS

vendor:

d link

model:

dsl-2750u me 1.09

scope:

version:

Trust: 0.9

sources: CNVD: CNVD-2014-00055 // BID: 64629

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2014-00055
value:	LOW
Trust: 0.6

CNVD:	CNVD-2014-00055
severity:	LOW
baseScore:	3.5
vectorString:	AV:N/AC:M/AU:S/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	SINGLE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	6.8
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

sources: CNVD: CNVD-2014-00055

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201401-411

TYPE

cross-site request forgery

Trust: 0.6

sources: CNNVD: CNNVD-201401-411

EXTERNAL IDS

db:	BID	id:	64629	Trust: 1.5
db:	EXPLOIT-DB	id:	30547	Trust: 0.6
db:	CNVD	id:	CNVD-2014-00055	Trust: 0.6
db:	CNNVD	id:	CNNVD-201401-411	Trust: 0.6

sources: CNVD: CNVD-2014-00055 // BID: 64629 // CNNVD: CNNVD-201401-411

REFERENCES

url:	http://www.exploit-db.com/exploits/30547/	Trust: 0.6
url:	http://www.securityfocus.com/bid/64629	Trust: 0.6
url:	http://www.dlink.com/	Trust: 0.3
url:	http://www.dlink.co.in/products/?pid=452	Trust: 0.3

sources: CNVD: CNVD-2014-00055 // BID: 64629 // CNNVD: CNNVD-201401-411

CREDITS

khaledmohdar

Trust: 0.9

sources: BID: 64629 // CNNVD: CNNVD-201401-411

SOURCES

db:	CNVD	id:	CNVD-2014-00055
db:	BID	id:	64629
db:	CNNVD	id:	CNNVD-201401-411

LAST UPDATE DATE

2022-05-17T02:08:09.169000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2014-00055	date:	2014-01-06T00:00:00
db:	BID	id:	64629	date:	2013-12-28T00:00:00
db:	CNNVD	id:	CNNVD-201401-411	date:	2014-01-23T00:00:00

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2014-00055	date:	2014-01-06T00:00:00
db:	BID	id:	64629	date:	2013-12-28T00:00:00
db:	CNNVD	id:	CNNVD-201401-411	date:	2013-12-28T00:00:00