Authentication flaw

2017-03-2205:59:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.0%

JSON

CSRF exists on D-Link DIR-600M Rev. Cx devices before v3.05ENB01_beta_20170306. This can be used to bypass authentication and insert XSS sequences or possibly have unspecified other impact.

CPENameOperatorVersion
dir-600m_firmwarele1.0.1

CPE	Name	Operator	Version
	dir-600m_firmware	le	1.0.1

References

supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10072

www.securityfocus.com/bid/96999