NVD

Id
31875  
Name
CVE-2014-3760  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP 1150 with firmware 1.2.94 allow remote attackers to hijack the authentication of administrators for requests that (1) enable or (2) disable the DMZ in the Firewall/DMZ section via a request to index.cgi or (3) add, (4) modify, or (5) delete URL-filter settings in the Control/URL-filter section via a request to index.cgi, as demonstrated by adding a rule that blocks access to google.com.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-05-16  
Modified Date
2014-05-16  
Seq
2014-3760  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
168097 31875 CVE-2014-3760 20140418 CSRF, AoF and XSS vulnerabilities in D-Link DAP 1150  View
168098 31875 CVE-2014-3760 http://websecurity.com.ua/7112  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13656 JVNDB-2014-002531 D-Link DAP 1150 のファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 D-Link DAP 1150 のファームウェアには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2014-3760 71048 CVE-2014-3760 31875 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002531.html 2014-04-18 2014-05-19 View