D-Link Dsr-1000 vulnerabilities

3 CVEs affecting D-Link Dsr-1000, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-7005, published 2013-12-19.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-5946, published 2013-12-19. High severity, CVSS 10.0. EPSS: 6.5% chance of exploitation in the next 30 days. The runShellCmd function in systemCheck.htm in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500,…
• CVE-2013-7004, published 2013-12-19. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware…
• CVE-2013-7005, published 2013-12-19. Medium severity, CVSS 4.9. EPSS: 0.7% chance of exploitation in the next 30 days. D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware…