CVE-2013-3095

Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR865L router (Rev

published November 19, 2013

CVSS
—
EPSS
1%
Percentile
66.8
In the wild
Unconfirmed
What it is

Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR865L router (Rev. A1) with firmware before 1.05b07 allow remote attackers to hijack the authentication of administrators for requests that (1) change the administrator password or (2) enable remote management via a request to hedwig.cgi or (3) activate configuration changes via a request to pigwidgeon.cgi.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01158 · 66.8th percentile
Published
2013-11-19T15:00Z
EPSS history
Timeline
  • 19 NOV 15:00Z
    Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR865L router (Rev
    cvelistv5