NVD

Id
29825  
Name
CVE-2014-100005  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx) with firmware before 2.17b02 allow remote attackers to hijack the authentication of administrators for requests that (1) create an administrator account or (2) enable remote management via a crafted configuration module to hedwig.cgi, (3) activate new configuration settings via a SETCFG,SAVE,ACTIVATE action to pigwidgeon.cgi, or (4) send a ping via a ping action to diagnostic.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-01-13  
Modified Date
2015-01-13  
Seq
2014-100005  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
157459 29825 CVE-2014-100005 http://resources.infosecinstitute.com/csrf-unauthorized-remote-admin-access/  View
157460 29825 CVE-2014-100005 http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10018  View
157461 29825 CVE-2014-100005 dir600-settings-csrf(91794)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18726 JVNDB-2014-007601 D-Link DIR-600 ルータのファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 D-Link DIR-600 ルータ (rev. Bx) のファームウェアには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2014-100005 68407 CVE-2014-100005 29825 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007601.html 2014-03-07 2015-01-15 View