CVE-2013-7320

EUVD-2013-7096
Cross-site request forgery (CSRF) vulnerability in D-Link DAP-2253 Access Point (Rev. A1) with firmware before 1.30 allows remote attackers to hijack the authentication of administrators for requests that modify configuration settings via unspecified vectors.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 23%
Affected Products (NVD)
VendorProductVersion
d-linkdap_2253_firmware
𝑥
≤ 1.26rc55
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/56022
http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10006
http://www.securityfocus.com/bid/64297
http://secunia.com/advisories/56022
http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10006
http://www.securityfocus.com/bid/64297