high8.8Public exploit code
CVE-2014-3136
Cross-site request forgery (CSRF) vulnerability in D-Link DWR-113 (Rev.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- D-Link DWR-113 Rev. Ax - Cross-Site Request Forgery / Denial of Service2014-07-30 · dos · hardware
Impact
Cross-site request forgery (CSRF) vulnerability in D-Link DWR-113 (Rev. Ax) with firmware before 2.03b02 allows remote attackers to hijack the authentication of administrators for requests that change the admin password via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dlink | Dwr-113 Firmware | before 2.03b02 |
Weakness classification
References
- NVD record
- CVE.org record
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95022
- https://packetstormsecurity.com/files/cve/CVE-2014-3136
- https://www.securityfocus.com/bid/68967
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95022
- https://packetstormsecurity.com/files/cve/CVE-2014-3136
- https://www.securityfocus.com/bid/68967