PT-2018-4330 · D Link · D-Link Dir-815

CVE-2015-0151

·

Publicado

2018-04-12

·

Atualizado

2023-04-26

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions D-Link DIR-815 devices with firmware prior to 2.07.B01
Description A cross-site request forgery issue allows remote attackers to hijack user authentication for requests that insert XSS sequences.
Recommendations For D-Link DIR-815 devices with firmware prior to 2.07.B01, update the firmware to version 2.07.B01 or later to resolve the issue.

Correção

CSRF

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2015-0151

Produtos afetados

D-Link Dir-815