D-Link DSL-2740b Firmware vulnerabilities

2 CVEs affecting D-Link DSL-2740b Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-5730, published 2013-11-20.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-2271, published 2013-11-19. High severity, CVSS 7.6. EPSS: 4.7% chance of exploitation in the next 30 days. The D-Link DSL-2740B Gateway with firmware EU_1.0, when an active administrator session exists, allows remote attackers to bypass authentication and gain administrator access via a request to…
• CVE-2013-5730, published 2013-11-20. Medium severity, CVSS 6.8. EPSS: 1.2% chance of exploitation in the next 30 days. Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DSL-2740B Gateway with firmware EU_1.00 allow remote attackers to hijack the authentication of administrators for requests that…