CVE-2014-100005: D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability
First published: Tue Jan 13 2015(Updated: )
D-Link DIR-600 routers contain a cross-site request forgery (CSRF) vulnerability that allows an attacker to change router configurations by hijacking an existing administrator session.
Credit: cve@mitre.org cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| D-link Dir-600 Firmware | <=2.16ww | |
| D-Link DIR-60 | ||
| All of | ||
| Dlink Dir-600 Firmware | <=2.16ww | |
| Dlink Dir-600 | ||
Remedy
This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://resources.infosecinstitute.com/csrf-unauthorized-remote-admin-access/
- http://secunia.com/advisories/57304
- http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10018
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91794
- https://www.bleepingcomputer.com/news/security/cisa-warns-of-hackers-exploiting-chrome-eol-d-link-bugs/
- https://legacy.us.dlink.com/pages/product.aspx?id=4587b63118524aec911191cc81605283;
- https://nvd.nist.gov/vuln/detail/CVE-2014-100005
- collector/nvd-index
- agent/author
- agent/type
- agent/weakness
- agent/title
- agent/remedy
- agent/description
- collector/bleeping-computer
- source/BleepingComputer
- alias/CVE-2024-4761
- alias/CVE-2024-4947
- alias/CVE-2014-100005
- alias/CVE-2021-40655
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/severity
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/references
- agent/softwarecombine
- agent/tags
- agent/event
- collector/nvd-cve
- vendor/d-link
- canonical/d-link dir-600 firmware
- version/d-link dir-600 firmware/2.16ww
- canonical/d-link dir-60
- vendor/dlink
- canonical/dlink dir-600 firmware
- version/dlink dir-600 firmware/2.16ww
- canonical/dlink dir-600
- canonical/d-link dir-600 router