Cross-Site Request Forgery Vulnerability in D-Link DCS-1130 Devices
CVE-2017-8407
8.8HIGH
Summary
A vulnerability in D-Link DCS-1130 devices allows attackers to exploit a lack of cross-site request forgery protection. This weakness enables malicious actors to trick authenticated users into executing unintended actions, such as changing their administrative passwords, by leveraging their existing sessions within the web management interface. This could lead to unauthorized access and control over the affected device, posing a significant risk to users and their connected environments.
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved