D-Link Dap 2253 Firmware vulnerabilities

2 CVEs affecting D-Link Dap 2253 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-7321, published 2014-02-06.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-7321, published 2014-02-06. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in D-Link DAP-2253 Access Point (Rev. A1) with firmware before 1.30 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
• CVE-2013-7320, published 2014-02-06. Medium severity, CVSS 6.8. EPSS: 0.7% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in D-Link DAP-2253 Access Point (Rev. A1) with firmware before 1.30 allows remote attackers to hijack the authentication of administrators for requests…