CVE

Id
76811  
CVE No.
CVE-2014-9510  
Status
Candidate  
Description
Cross-site request forgery (CSRF) vulnerability in the administration console in TP-Link TL-WR840N (V1) router with firmware before 3.13.27 build 141120 allows remote attackers to hijack the authentication of administrators for requests that change router settings via a configuration file import.  
Phase
Assigned (20150105)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
705415 76811 CVE-2014-9510 FULLDISC:20150107 CVE-2014-9510 - TP-Link TL-WR840N Configuration Import Cross-Site Request Forgery (CSRF)  View
705416 76811 CVE-2014-9510 URL:http://seclists.org/fulldisclosure/2015/Jan/14  View
705417 76811 CVE-2014-9510 MISC:http://www.secureworks.com/cyber-threat-intelligence/advisories/SWRX-2015-001/  View
705418 76811 CVE-2014-9510 CONFIRM:http://www.tp-link.com/en/support/download/?model=TL-WR840N&version=V1  View
705419 76811 CVE-2014-9510 BID:71913  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
18635 JVNDB-2014-007510 D-Link ルータ DIR-655 のファームウェアの login.cgi におけるクロスサイトスクリプティングの脆弱性 D-Link ルータ DIR-655 (rev Bx) のファームウェアの login.cgi には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-9518 76811 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007510.html  View