Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2013-6811

Опубликовано: 22 нояб. 2019
Источник: nvd
CVSS3: 8.8
CVSS2: 6.8
EPSS Низкий

Описание

Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DSL-6740U gateway (Rev. H1) allow remote attackers to hijack the authentication of administrators for requests that change administrator credentials or enable remote management services to (1) Custom Services in Port Forwarding, (2) Port Triggering Entries, (3) URL Filters in Parental Control, (4) Print Server settings, (5) QoS Queue Setup, or (6) QoS Classification Entries.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:d-link:dsl6740u_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:d-link:dsl6740u:h1:*:*:*:*:*:*:*

EPSS

Процентиль: 37%
0.00158
Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

github
почти 4 года назад

Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DSL-6740U gateway (Rev. H1) allow remote attackers to hijack the authentication of administrators for requests that change administrator credentials or enable remote management services to (1) Custom Services in Port Forwarding, (2) Port Triggering Entries, (3) URL Filters in Parental Control, (4) Print Server settings, (5) QoS Queue Setup, or (6) QoS Classification Entries.

EPSS

Процентиль: 37%
0.00158
Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352