D-Link Dir-100 Firmware vulnerabilities

5 CVEs affecting D-Link Dir-100 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-7055, published 2020-02-04.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-7052, published 2020-02-04. Critical severity, CVSS 9.8. EPSS: 24.7% chance of exploitation in the next 30 days. D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi script
• CVE-2013-7051, published 2020-02-04. High severity, CVSS 8.8. EPSS: 15.6% chance of exploitation in the next 30 days. D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters
• CVE-2013-7055, published 2020-02-04. Critical severity, CVSS 9.8. EPSS: 7% chance of exploitation in the next 30 days. D-Link DIR-100 4.03B07 has PPTP and poe information disclosure
• CVE-2013-7054, published 2020-02-04. Medium severity, CVSS 6.1. EPSS: 3.5% chance of exploitation in the next 30 days. D-Link DIR-100 4.03B07: cli.cgi XSS
• CVE-2013-7053, published 2020-02-04. High severity, CVSS 8.8. EPSS: 3.4% chance of exploitation in the next 30 days. D-Link DIR-100 4.03B07: cli.cgi CSRF