Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in D-Link DAP-2253 Access Point (Rev. A1) with firmware before 1.30 allows remote attackers to hijack the authentication of administrators for requests that modify configuration settings via unspecified vectors.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| D-Link | Dap 2253 Firmware | <= 1.26rc55 |
| D-Link | Dap 2253 | a1 |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/56022Vendor Advisory
- http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10006Vendor Advisory
- http://www.securityfocus.com/bid/64297
- http://secunia.com/advisories/56022Vendor Advisory
- http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10006Vendor Advisory
- http://www.securityfocus.com/bid/64297
FAQ
What is CVE-2013-7320?
CVE-2013-7320 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Cross-site request forgery (CSRF) vulnerability in D-Link DAP-2253 Access Point (Rev. A1) with firmware before 1.30 allows remote attackers to hijack the authentication of administrators for requests ...
How severe is CVE-2013-7320?
CVE-2013-7320 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-7320?
Check the references section above for vendor advisories and patch information. Affected products include: D-Link Dap 2253 Firmware, D-Link Dap 2253.