PT-2014-3363 · D Link · D-Link Dap-2253 Access Point

Published 2014-02-06 · Updated 2017-08-29 · CVE-2013-7321

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions D-Link DAP-2253 Access Point version prior to 1.30

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This could potentially lead to unauthorized access or control of the affected system.

Recommendations For versions prior to 1.30, update the firmware to version 1.30 or later to resolve the issue. As a temporary workaround, consider restricting access to the web interface of the D-Link DAP-2253 Access Point until the firmware can be updated.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2013-7321

Affected Products

D-Link Dap-2253 Access Point

References · 5

• http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10006 · Vendor Advisory
• http://secunia.com/advisories/56022 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-7321 · Security Note
• http://securityfocus.com/bid/64297 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89728 · Note