VulnerabilitycriticalExploited in the wild

CISA Warns of Actively Exploited D-Link Router Vulnerabilities

The Hacker Newsby @TheHackersNewsMay 17, 2024 · 11:23 UTC (May 17, 2024)2 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2014-100005 CVE-2021-40655 CVE-2024-22026 CVE-2023-46806 CVE-2023-46807

Tags: cve-2014-100005 cve-2021-40655 cve-2024-22026 cve-2023-46806 cve-2023-46807 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2014-100005	CSRF in D-Link DIR-600 Router Allows Unauthorized Configuration Changes	—	43%	KEV	— KEV May 16, 2024
CVE-2021-40655	Unauthenticated credential disclosure in D-Link DIR-605 router (getcfg.php)	7.5	87%	KEVPoC	Sep 24, 2021 KEV May 16, 2024
CVE-2024-22026 +2 related CVEs CVE-2023-46807 CVE-2023-46806	A local privilege escalation vulnerability in EPMM before 12.1.0.0 allows an authenticated local user to bypass shell restriction and execute arbitrary…	6.7	1%		May 22, 2024

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  May 17, 2024 Vulnerability / Network Security The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting D-Link routers to its Known Exploited Vulnerabilities ( KEV ) catalog, based on evidence of active exploitation.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.