D-Link DSL-2730u Firmware vulnerabilities

3 CVEs affecting D-Link DSL-2730u Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-46033, published 2023-10-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-6411, published 2017-03-06. High severity, CVSS 8.8. EPSS: 3% chance of exploitation in the next 30 days. Cross Site Request Forgery (CSRF) on D-Link DSL-2730U C1 IN_1.00 devices allows remote attackers to change the DNS or firewall configuration or any password.
CVE-2020-13960, published 2020-06-08. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. D-Link DSL 2730-U IN_1.10 and IN_1.11 and DIR-600M 3.04 devices have the domain.name string in the DNS resolver search path by default, which allows remote attackers to provide valid DNS responses…
CVE-2023-46033, published 2023-10-19. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. D-Link (Non-US) DSL-2750U N300 ADSL2+ and (Non-US) DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control. The UART/Serial interface on the PCB, provides log output and a root terminal…