CVE-2014-10027

D-Link DAP-1360 Firmware < 2.5.4 - Cross-Site Request Forgery via MAC Filter Management

Title source: llm
STIX 2.1

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP-1360 router with firmware 2.5.4 and earlier allow remote attackers to hijack the authentication of unspecified users for requests that (1) change the MAC filter restrict mode, (2) add a MAC address to the filter, or (3) remove a MAC address from the filter via a crafted request to index.cgi.

References (2)

Core 2
Core References
Exploit x_refsource_misc
http://websecurity.com.ua/7215/
Exploit mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2014/Nov/100

Scores

EPSS 0.0044
EPSS Percentile 63.5%

Details

CWE
CWE-352
Status published
Products (1)
dlink/dap-1360_firmware < 2.5.4
Published Jan 13, 2015
Tracked Since Feb 18, 2026