Security News > 2024 > May > CISA Warns of Actively Exploited D-Link Router Vulnerabilities - Patch Now
2024-05-17 06:43
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting D-Link routers to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The list of vulnerabilities is as follows - CVE-2014-100005 - A cross-site request forgery (CSRF) vulnerability impacting D-Link DIR-600 routers that allows an
News URL
https://thehackernews.com/2024/05/cisa-warns-of-actively-exploited-d-link.html
Related news
- Alert: Over 700,000 DrayTek Routers Exposed to Hacking via 14 New Vulnerabilities (source)
- Ivanti Endpoint Manager Flaw Actively Targeted, CISA Warns Agencies to Patch (source)
- Patch Tuesday: Internet Explorer Vulnerabilities Still Pose a Problem (source)
- FBI, CISA, and NSA reveal most exploited vulnerabilities of 2023 (source)
- Patch Tuesday: Four Critical Vulnerabilities Paved Over (source)
- D-Link urges users to retire VPN routers impacted by unfixed RCE flaw (source)
- Apple Releases Urgent Updates to Patch Actively Exploited Zero-Day Vulnerabilities (source)
- D-Link tells users to trash old VPN routers over bug too dangerous to identify (source)
Related Vulnerability
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2015-01-13 | CVE-2014-100005 | Cross-Site Request Forgery (CSRF) vulnerability in Dlink Dir-600 Firmware 2.16Ww Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. | 8.8 |