CVE-2017-5633
Last modified
CVE-2017-5633 is a vulnerability of currently unknown severity. Multiple cross-site request forgery (CSRF) vulnerabilities on the D-Link DI-524 Wireless Router with firmware 9.01 allow remote attackers to (1) change the admin password, (2) reboot the device, or (3) possibly have unspecified other impact via crafted requests to CGI programs.. EPSS estimates a 3.96% chance of exploitation in the next 30 days.
Description
Multiple cross-site request forgery (CSRF) vulnerabilities on the D-Link DI-524 Wireless Router with firmware 9.01 allow remote attackers to (1) change the admin password, (2) reboot the device, or (3) possibly have unspecified other impact via crafted requests to CGI programs.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| D-Link | Di-524 Firmware | 9.01 |
References
- http://seclists.org/fulldisclosure/2017/Feb/70Exploit, Product, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/96475Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2017/Feb/70Exploit, Product, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/96475Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-5633?
How severe is CVE-2017-5633?
How do I fix CVE-2017-5633?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-5626OxygenOS before version 4.0.2, on OnePlus 3 and 3T, has two …
- CVE-2017-5627An issue was discovered in Artifex Software, Inc. MuJS befor…7.8
- CVE-2017-5628An issue was discovered in Artifex Software, Inc. MuJS befor…7.8
- CVE-2017-5630PECL in the download utility class in the Installer in PEAR …7.5
- CVE-2017-5631An issue was discovered in KMCIS CaseAware. Reflected cross …
- CVE-2017-5632An issue was discovered on the ASUS RT-N56U Wireless Router …
- CVE-2017-5634The Norwegian Air Shuttle (aka norwegian.com) airline kiosk …
- CVE-2017-5635In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluste…
- CVE-2017-5636In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluste…
- CVE-2017-5637Two four letter word commands "wchp/wchc" are CPU intensive …
- CVE-2017-5638The Jakarta Multipart parser in Apache Struts 2 2.3.x before…9.8
- CVE-2017-5639Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
Are you affected by CVE-2017-5633?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
