What is the severity of CVE-2017-7404?

CVE-2017-7404 has been classified as a medium severity vulnerability due to its potential for exploitation via cross-site request forgery.

How do I fix CVE-2017-7404?

To fix CVE-2017-7404, update the D-Link DIR-615 router to firmware version 20.12PTb04 or later.

What devices are affected by CVE-2017-7404?

CVE-2017-7404 affects the D-Link DIR-615 router models with firmware versions prior to 20.12PTb04.

What type of attack can exploit CVE-2017-7404?

CVE-2017-7404 can be exploited through a cross-site request forgery (CSRF) attack that allows unauthorized commands to be sent to the router.

Can CVE-2017-7404 be exploited remotely?

Yes, CVE-2017-7404 can be exploited remotely if the victim is tricked into visiting a malicious site while logged into the router's web interface.

Vulnerability/
CVE-2017-7404

high

8.8

CWE

352

7/7/2017

23/4/2021

CVE-2017-7404: CSRF

First published: Fri Jul 07 2017(Updated: )

On the D-Link DIR-615 before v20.12PTb04, if a victim logged in to the Router's Web Interface visits a malicious site from another Browser tab, the malicious site then can send requests to the victim's Router without knowing the credentials (CSRF). An attacker can host a page that sends a POST request to Form2File.htm that tries to upload Firmware to victim's Router. This causes the router to reboot/crash resulting in Denial of Service. An attacker may succeed in uploading malicious Firmware.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
D-Link DIR-615	<=20.12ptb01
D-Link DIR-615

Remedy

ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-615/REVT/DIR-615_REVT_FIRMWARE_PATCH_v20.12PTb04.zip

Never miss a vulnerability like this again

Reference Links

https://www.qualys.com/2017/03/12/qsa-2017-03-12/qsa-2017-03-12.pdf

Frequently Asked Questions

What is the severity of CVE-2017-7404?
CVE-2017-7404 has been classified as a medium severity vulnerability due to its potential for exploitation via cross-site request forgery.
How do I fix CVE-2017-7404?
To fix CVE-2017-7404, update the D-Link DIR-615 router to firmware version 20.12PTb04 or later.
What devices are affected by CVE-2017-7404?
CVE-2017-7404 affects the D-Link DIR-615 router models with firmware versions prior to 20.12PTb04.
What type of attack can exploit CVE-2017-7404?
CVE-2017-7404 can be exploited through a cross-site request forgery (CSRF) attack that allows unauthorized commands to be sent to the router.
Can CVE-2017-7404 be exploited remotely?
Yes, CVE-2017-7404 can be exploited remotely if the victim is tricked into visiting a malicious site while logged into the router's web interface.

agent/weakness
agent/author
agent/type
agent/event
agent/first-publish-date
agent/softwarecombine
agent/last-modified-date
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
agent/description
agent/references
agent/severity
agent/remedy
vendor/dlink
canonical/d-link dir-615
version/d-link dir-615/20.12ptb01

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.