high8.8Public exploit code
CVE-2017-7851
D-Link DCS-936L devices with firmware before 1.05.07 have an inadequate CSRF protection mechanism that requires the device's IP address to be a substring of th…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- D-Link DCS-936L Network Camera - Cross-Site Request Forgery2017-03-26 · webapps · hardware
Impact
D-Link DCS-936L devices with firmware before 1.05.07 have an inadequate CSRF protection mechanism that requires the device's IP address to be a substring of the HTTP Referer header.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| D-Link | Dcs-936l | before 1.05.07 |