CVE-2004-0615: D-Link Di-614+

Medium severity, CVSS 5.1. EPSS: 2.4% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router running firmware 2.60B2, and DI-624, allows remote attackers to inject arbitrary script or HTML via the DHCP HOSTNAME option in a DHCP request.

Affected products

• D-Link Di-614+: version 2.30 only
• D-Link Di-704p: version 2.60b2 only
• D-Link Di-624: up to and including 1.28

Published 2004-12-06. Last modified 2026-06-16.