NetSight
high8.8

CVE-2017-5874

CSRF exists on D-Link DIR-600M Rev.

Impact

CSRF exists on D-Link DIR-600M Rev. Cx devices before v3.05ENB01_beta_20170306. This can be used to bypass authentication and insert XSS sequences or possibly have unspecified other impact.

Affected products

VendorProductAffected versions
D-LinkDir-600m Firmware
through 1.0.1

Weakness classification

References