D-Link Di-614+ vulnerabilities

3 CVEs affecting D-Link Di-614+, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2004-0615, published 2004-12-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-0615, published 2004-12-06. Medium severity, CVSS 5.1. EPSS: 2.4% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router running firmware 2.60B2, and DI-624, allows remote attackers to inject arbitrary…
CVE-2004-0661, published 2004-08-06. Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days. Integer signedness error in D-Link AirPlus DI-614+ running firmware 2.30 and earlier allows remote attackers to cause a denial of service (IP lease depletion) via a DHCP request with the LEASETIME…
CVE-2003-1264, published 2003-12-31. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. TFTP server in Longshine Wireless Access Point (WAP) LCS-883R-AC-B, and in D-Link DI-614+ 2.0 which is based on it, allows remote attackers to obtain the WEP secret and gain administrator privileges…