D-Link Dir-615 Firmware vulnerabilities

3 CVEs affecting D-Link Dir-615 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-10431, published 2018-04-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-9542, published 2017-06-11. Critical severity, CVSS 9.8. EPSS: 5.1% chance of exploitation in the next 30 days. D-Link DIR-615 Wireless N 300 Router allows authentication bypass via a modified POST request to login.cgi. This issue occurs because it fails to validate the password field. Successful exploitation…
CVE-2017-7398, published 2017-04-04. High severity, CVSS 8.8. EPSS: 3% chance of exploitation in the next 30 days. D-Link DIR-615 HW: T1 FW:20.09 is vulnerable to Cross-Site Request Forgery (CSRF) vulnerability. This enables an attacker to perform an unwanted action on a wireless router for which the user/admin…
CVE-2018-10431, published 2018-04-26. High severity, CVSS 7.2. EPSS: 2.6% chance of exploitation in the next 30 days. D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen.