PT-2017-17712 · D Link · D-Link Dir-615

Published 2017-07-07 · Updated 2021-04-23 · CVE-2017-7404

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DIR-615 versions prior to 20.12PTb04

Description The issue allows an attacker to send requests to the victim's router without knowing the credentials, due to a CSRF vulnerability. If a victim logs in to the router's web interface and visits a malicious site from another browser tab, the malicious site can send a POST request to "Form2File.htm" to upload firmware to the victim's router. This can cause the router to reboot or crash, resulting in a Denial of Service. An attacker may also succeed in uploading malicious firmware.

Recommendations For D-Link DIR-615 versions prior to 20.12PTb04, update to version 20.12PTb04 or later to resolve the issue. As a temporary workaround, consider restricting access to the "Form2File.htm" endpoint to minimize the risk of exploitation. Avoid using the router's web interface while browsing other sites to reduce the risk of CSRF attacks.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2017-7404

Affected Products

D-Link Dir-615

References · 4

• https://osv.dev/vulnerability/CVE-2017-7404 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-7404 · Security Note
• ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-615/REVT/DIR-615_REVT_FIRMWARE_PATCH_v20.12PTb04.zip · Vendor Advisory
• https://qualys.com/2017/03/12/qsa-2017-03-12/qsa-2017-03-12.pdf · Note