Cross-Site Scripting Vulnerability in D-Link DIR-850L Devices
CVE-2017-14416

6.1MEDIUM

Key Information:

Vendor
D-Link
Status
Dir-850l Firmware
Vendor
CVE Published:
13 September 2017

Summary

The D-Link DIR-850L REV. A devices exhibit a Cross-Site Scripting (XSS) vulnerability due to improper handling of the 'action' parameter in the htdocs/web/wandetect.php file. This flaw could allow attackers to inject malicious scripts into web pages viewed by users, potentially compromising the confidentiality and integrity of user data.

References

https://pierrekim.github.io/blog/2017-09-08-dlink-850l-my...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.