CVE-2024-9792

LOW

D-Link DSL-2750U R5B017 - Cross-Site Scripting via PortMappingDescription Parameter

Title source: llm

Description

A vulnerability classified as problematic has been found in D-Link DSL-2750U R5B017. This affects an unknown part of the component Port Forwarding Page. The manipulation of the argument PortMappingDescription leads to cross site scripting. It is possible to initiate the attack remotely.

References (4)

Core 4

Core References

Third Party Advisory vdb-entry technical-description

https://vuldb.com/?id.279945

Permissions Required signature permissions-required

https://vuldb.com/?ctiid.279945

Third Party Advisory third-party-advisory

https://vuldb.com/?submit.415532

Product product

https://www.dlink.com/

Scores

CVSS v3 2.4

EPSS 0.0021

EPSS Percentile 43.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-79

Status published

Products (1)

dlink/dsl-2750u_firmware r5b017

Published Oct 10, 2024

Tracked Since Feb 18, 2026