CVE-2018-7859

A security vulnerability in D-Link DGS-1510-series switches with firmware 1.20.011, 1.30.007, 1.31.B003 and older that may allow a remote attacker to inject malicious scripts in the device and execute commands via browser that is configuring the unit.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.1 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 38%
VendorProductVersion
dlinkdgs-1510-20_firmware
𝑥
≤ 1.31.b003
dlinkdgs-1510-20_firmware
1.20.011
dlinkdgs-1510-20_firmware
1.30.007
dlinkdgs-1510-28_firmware
𝑥
≤ 1.31.b003
dlinkdgs-1510-28_firmware
1.20.011
dlinkdgs-1510-28_firmware
1.30.007
dlinkdgs-1510-28p_firmware
𝑥
≤ 1.31.b003
dlinkdgs-1510-28p_firmware
1.20.011
dlinkdgs-1510-28p_firmware
1.30.007
dlinkdgs-1510-28x_firmware
𝑥
≤ 1.31.b003
dlinkdgs-1510-28x_firmware
1.20.011
dlinkdgs-1510-28x_firmware
1.30.007
dlinkdgs-1510-28xmp_firmware
𝑥
≤ 1.31.b003
dlinkdgs-1510-28xmp_firmware
1.20.011
dlinkdgs-1510-28xmp_firmware
1.30.007
dlinkdgs-1510-52x_firmware
𝑥
≤ 1.31.b003
dlinkdgs-1510-52x_firmware
1.20.011
dlinkdgs-1510-52x_firmware
1.30.007
dlinkdgs-1510-52xmp_firmware
𝑥
≤ 1.31.b003
dlinkdgs-1510-52xmp_firmware
1.20.011
dlinkdgs-1510-52xmp_firmware
1.30.007
dlinkdgs-1510-52_firmware
𝑥
≤ 1.31.b003
dlinkdgs-1510-52_firmware
1.20.011
dlinkdgs-1510-52_firmware
1.30.007
𝑥
= Vulnerable software versions