D-Link DSL-2740B CVE-2013-5730 Multiple Cross Site Request Forgery Vulnerabilities

Bugtraq ID:	62356
Class:	Input Validation Error
CVE:	CVE-2013-5730
Remote:	Yes
Local:	No
Published:	Sep 08 2013 12:00AM
Updated:	Sep 08 2013 12:00AM
Credit:	Ivano Binetti
Vulnerable:	D-Link DSL-2740B EU_1.00
Not Vulnerable:

D-Link DSL-2740B CVE-2013-5730 Multiple Cross Site Request Forgery Vulnerabilities

D-Link DSL-2740B is prone to multiple cross-site request-forgery vulnerabilities.

Exploiting these issues may allow a remote attacker to perform certain unauthorized actions. This may lead to further attacks.

D-Link DSL-2740B EU_1.00 is vulnerable; other versions may also be affected.

D-Link DSL-2740B CVE-2013-5730 Multiple Cross Site Request Forgery Vulnerabilities

An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.

The following exploit is available:

• /data/vulnerabilities/exploits/62356.txt

D-Link DSL-2740B CVE-2013-5730 Multiple Cross Site Request Forgery Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

D-Link DSL-2740B CVE-2013-5730 Multiple Cross Site Request Forgery Vulnerabilities

References:

• D-Link DSL-2740B HomePage (D-Link)
  
• D-Link DSL-2740B Multiple CSRF Vulnerabilities (Ivano Binetti)