Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2015-5999

Опубликовано: 18 нояб. 2015
Источник: nvd
CVSS2: 6.8
EPSS Средний

Описание

Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DIR-816L Wireless Router with firmware before 2.06.B09_BETA allow remote attackers to hijack the authentication of administrators for requests that (1) change the admin password, (2) change the network policy, or (3) possibly have other unspecified impact via crafted requests to hedwig.cgi and pigwidgeon.cgi.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:dlink:dir-816l_firmware:*:*:*:*:*:*:*:*
Версия до 2.05.b02 (включая)
cpe:2.3:h:dlink:dir-816l:-:*:*:*:*:*:*:*

EPSS

Процентиль: 95%
0.16438
Средний

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

github
больше 3 лет назад

Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DIR-816L Wireless Router with firmware before 2.06.B09_BETA allow remote attackers to hijack the authentication of administrators for requests that (1) change the admin password, (2) change the network policy, or (3) possibly have other unspecified impact via crafted requests to hedwig.cgi and pigwidgeon.cgi.

EPSS

Процентиль: 95%
0.16438
Средний

6.8 Medium

CVSS2

Дефекты

CWE-352