Lucene search

[email protected]CVE-2013-3095

HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-3095

2022-10-0316:14:45

CWE-352

[email protected]

web.nvd.nist.gov

cve-2013-3095

d-link dir865l

router

csrf

vulnerabilities

firmware

remote management

nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

83.1%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR865L router (Rev. A1) with firmware before 1.05b07 allow remote attackers to hijack the authentication of administrators for requests that (1) change the administrator password or (2) enable remote management via a request to hedwig.cgi or (3) activate configuration changes via a request to pigwidgeon.cgi.

Affected configurations

NVD

Node

dlinkdir865l_firmwareRange≤1.05

dlinkdir865l_firmwareMatch1.00b24

dlinkdir865l_firmwareMatch1.02

dlinkdir865l_firmwareMatch1.03

AND

dlinkdir865lMatch-

CPENameOperatorVersion
dlink:dir865l_firmwaredlink dir865l firmwarele1.05
dlink:dir865l_firmwaredlink dir865l firmwareeq1.00b24
dlink:dir865l_firmwaredlink dir865l firmwareeq1.02
dlink:dir865l_firmwaredlink dir865l firmwareeq1.03
dlink:dir865ldlink dir865leq-

CPE	Name	Operator	Version
dlink:dir865l_firmware	dlink dir865l firmware	le	1.05
dlink:dir865l_firmware	dlink dir865l firmware	eq	1.00b24
dlink:dir865l_firmware	dlink dir865l firmware	eq	1.02
dlink:dir865l_firmware	dlink dir865l firmware	eq	1.03
dlink:dir865l	dlink dir865l	eq	-

References

secunia.com/advisories/53064

securityadvisories.dlink.com/security/publication.aspx?name=SAP10003

securityevaluators.com/content/case-studies/routers/dlink_dir865l.jsp

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

83.1%

JSON

Related for CVE-2013-3095

nvd1 prion1 cvelist1