CVE-2017-7398

HIGH

D-Link DIR-615 - Cross-Site Request Forgery

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2017-7398 has a selected CVSS score of 8.8 (high); EIP currently links 1 catalogued exploit.

Description

D-Link DIR-615 HW: T1 FW:20.09 is vulnerable to Cross-Site Request Forgery (CSRF) vulnerability. This enables an attacker to perform an unwanted action on a wireless router for which the user/admin is currently authenticated, as demonstrated by changing the Security option from WPA2 to None, or changing the hiddenSSID parameter, SSID parameter, or a security-option password.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBD-Link DIR-615 - Cross-Site Request ForgeryExploitDB exploitby Pratik S. ShahNot analyzed1 file
ExploitDB
PoC details

References

3