Lucene search
PRIOn knowledge basePRION:CVE-2014-100005HistoryJan 13, 2015 - 11:59 a.m.
Cross site request forgery (csrf)
2015-01-1311:59:00
PRIOn knowledge base
www.prio-n.com
Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx) with firmware before 2.17b02 allow remote attackers to hijack the authentication of administrators for requests that (1) create an administrator account or (2) enable remote management via a crafted configuration module to hedwig.cgi, (3) activate new configuration settings via a SETCFG,SAVE,ACTIVATE action to pigwidgeon.cgi, or (4) send a ping via a ping action to diagnostic.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dir-600_firmware | eq | <= 2.16ww |
Related
attackerkb
attackerkb
CVE-2014-100005
2015-01-13 00:00:00
cvelist
cvelist
CVE-2014-100005
2015-01-13 11:00:00
nessus
nessus
DLink DIR < 2.17.b02 (SAP10018)
2024-05-23 00:00:00
cisa_kev
cisa_kev
D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability
2024-05-16 00:00:00
nvd
nvd
CVE-2014-100005
2015-01-13 11:59:04
openvas
openvas
D-Link Devices Multiple Vulnerabilities (Apr 2013) - Active Check
2013-04-09 00:00:00
cve
cve
CVE-2014-100005
2015-01-13 11:59:04
thn
thn
CISA Warns of Actively Exploited D-Link Router Vulnerabilities - Patch Now
2024-05-17 06:43:00