cvedb.io
CVE-2017-7398
HIGH · CVSS 8.8
EPSS exploitation probability: 0%
Published 2017-04-04T14:59:00.273 · Last modified 2026-06-17T01:24:16.270

Summary

D-Link DIR-615 HW: T1 FW:20.09 is vulnerable to Cross-Site Request Forgery (CSRF) vulnerability. This enables an attacker to perform an unwanted action on a wireless router for which the user/admin is currently authenticated, as demonstrated by changing the Security option from WPA2 to None, or changing the hiddenSSID parameter, SSID parameter, or a security-option password.

Affected products

d-link — dir-615_firmware

Does this affect you?

Add your gear to cvedb and we'll alert you only when d-link ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.