CVE-2014-3760

Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP 1150 with firmware 1.2.94 allow remote attackers to hijack the authentication of…

published May 16, 2014

CVSS
—
EPSS
1%
Percentile
50.8
In the wild
Unconfirmed
What it is

Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP 1150 with firmware 1.2.94 allow remote attackers to hijack the authentication of administrators for requests that (1) enable or (2) disable the DMZ in the Firewall/DMZ section via a request to index.cgi or (3) add, (4) modify, or (5) delete URL-filter settings in the Control/URL-filter section via a request to index.cgi, as demonstrated by adding a rule that blocks access to google.com.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00663 · 50.8th percentile
Published
2014-05-16T14:00Z
EPSS history
Timeline
  • 16 MAY 14:00Z
    Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP 1150 with firmware 1.2.94 allow remote attackers to hijack the authentication of…
    cvelistv5