CVE-2017-7404: Cross-Site Request Forgery (CSRF)

On the D-Link DIR-615 before v20.12PTb04, if a victim logged in to the Router's Web Interface visits a malicious site from another Browser tab, the malicious site then can send requests to the victim's Router without knowing the credentials CSRF. An attacker can host a page that sends a POST...

PT-2017-17712

Name of the Vulnerable Software and Affected Versions D-Link DIR-615 versions prior to 20.12PTb04 Description The issue allows an attacker to send requests to the victim's router without knowing the credentials, due to a CSRF vulnerability. If a victim logs in to the router's web interface and...