Cross site request forgery (csrf)

2014-02-0616:10:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.1%

JSON

Cross-site request forgery (CSRF) vulnerability in D-Link DAP-2253 Access Point (Rev. A1) with firmware before 1.30 allows remote attackers to hijack the authentication of administrators for requests that modify configuration settings via unspecified vectors.

CPENameOperatorVersion
dap_2253eq1.0.97
dap_2253_firmwareeq<= 1.26rc55

CPE	Name	Operator	Version
	dap_2253	eq	1.0.97
	dap_2253_firmware	eq	<= 1.26rc55

References

secunia.com/advisories/56022

securityadvisories.dlink.com/security/publication.aspx?name=SAP10006

www.securityfocus.com/bid/64297