Описание
D-Link DIR-601 B1 2.00NA devices have CSRF because no anti-CSRF token is implemented. A remote attacker could exploit this in conjunction with CVE-2019-16327 to enable remote router management and device compromise. NOTE: this is an end-of-life product.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:dlink:dir-601_firmware:2.00na:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-601:b1:*:*:*:*:*:*:*
EPSS
Процентиль: 74%
0.00816
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-352
Связанные уязвимости
github
больше 3 лет назад
D-Link DIR-601 B1 2.00NA devices have CSRF because no anti-CSRF token is implemented. A remote attacker could exploit this in conjunction with CVE-2019-16327 to enable remote router management and device compromise. NOTE: this is an end-of-life product.
EPSS
Процентиль: 74%
0.00816
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-352