CVE-2014-3136

EPSS 2.9%

Cross-site request forgery (CSRF) vulnerability in D-Link DWR-113 (Rev. Ax) with firmware before 2.03b02 allows remote attackers to hijack the authentication of administrators for requests that change the admin password via unspecified vectors.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencepacketstormsecurity.com/files/cve/CVE-2014-3136unverified exploitdbwww.exploit-db.com/exploits/34203unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/95022 https://packetstormsecurity.com/files/cve/CVE-2014-3136 https://www.securityfocus.com/bid/68967