CVE-2017-14413: XSS
D-Link DIR-850L REV. A (with firmware through FW114WWb07h2abbeta1) devices have XSS in the action parameter to htdocs/web/wpsacts.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14413?
CVE-2017-14413 is categorized as a medium severity vulnerability due to the potential for reflected cross-site scripting (XSS) attacks.
How do I fix CVE-2017-14413?
To mitigate CVE-2017-14413, users should update their D-Link DIR-850L firmware to a version later than FW114WWb07_h2ab that addresses the XSS vulnerability.
What devices are affected by CVE-2017-14413?
CVE-2017-14413 specifically affects D-Link DIR-850L devices running firmware versions through FW114WWb07_h2ab and the beta version FW114WWb07_h2ab-beta1.
What is the exploit method for CVE-2017-14413?
CVE-2017-14413 can be exploited through the action parameter in the htdocs/web/wpsacts.php script, allowing attackers to execute XSS attacks.
Can CVE-2017-14413 be exploited remotely?
Yes, CVE-2017-14413 can be exploited remotely without requiring physical access to the D-Link DIR-850L device.