CVE-2015-5999
Last modified
CVE-2015-5999 is a vulnerability of currently unknown severity. Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DIR-816L Wireless Router with firmware before 2.06.B09_BETA allow remote attackers to hijack the authentication of administrators for requests that (1) change the admin password, (2) change the network policy, or (3) possibly have other unspecified impact via crafted requests to hedwig.cgi and pigwidgeon.cgi.. EPSS estimates a 3.21% chance of exploitation in the next 30 days.
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DIR-816L Wireless Router with firmware before 2.06.B09_BETA allow remote attackers to hijack the authentication of administrators for requests that (1) change the admin password, (2) change the network policy, or (3) possibly have other unspecified impact via crafted requests to hedwig.cgi and pigwidgeon.cgi.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dlink | Dir-816l Firmware | <= 2.05.b02 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2015-5999?
How severe is CVE-2015-5999?
How do I fix CVE-2015-5999?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2015
- CVE-2015-5993Buffer overflow in form2ping.cgi on Philippine Long Distance…
- CVE-2015-5994The web management interface on Mediabridge Medialink MWN-WA…
- CVE-2015-5995Mediabridge Medialink MWN-WAPR300N devices with firmware 5.0…
- CVE-2015-5996Cross-site request forgery (CSRF) vulnerability on Mediabrid…
- CVE-2015-5997Impero Education Pro before 5105 uses a hardcoded CBC key an…
- CVE-2015-5998Impero Education Pro before 5105 relies on the -1|AUTHENTICA…
- CVE-2015-6000Unrestricted file upload vulnerability in the Settings_Vtige…8.8
- CVE-2015-6003Directory traversal vulnerability in QNAP QTS before 4.1.4 b…
- CVE-2015-6004Multiple SQL injection vulnerabilities in IPSwitch WhatsUp G…
- CVE-2015-6005Multiple cross-site scripting (XSS) vulnerabilities in IPSwi…
- CVE-2015-6006The AddUserFinding implementation in Medicomp MEDCIN Engine …
- CVE-2015-6007Cross-site request forgery (CSRF) vulnerability in Web Refer…
Are you affected by CVE-2015-5999?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST