PT-2014-3363 · D Link · D-Link Dap-2253 Access Point

Publicado 2014-02-06 · Atualizado 2017-08-29 · CVE-2013-7321

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions D-Link DAP-2253 Access Point version prior to 1.30

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This could potentially lead to unauthorized access or control of the affected system.

Recommendations For versions prior to 1.30, update the firmware to version 1.30 or later to resolve the issue. As a temporary workaround, consider restricting access to the web interface of the D-Link DAP-2253 Access Point until the firmware can be updated.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2013-7321

Produtos afetados

D-Link Dap-2253 Access Point

Referências · 5

• http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10006 · Aviso do Fabricante
• http://secunia.com/advisories/56022 · Aviso do Fabricante
• http://securityfocus.com/bid/64297 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89728 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-7321 · Nota de Segurança