DIR 815 Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2018-04-12	CVE-2015-0151	Cross-Site Request Forgery (CSRF) vulnerability in Dlink Dir-815 Firmware Cross-site request forgery (CSRF) vulnerability in D-Link DIR-815 devices with firmware before 2.07.B01 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. network low complexity dlink CWE-352	8.8
2018-04-12	CVE-2015-0150	Improper Access Control vulnerability in Dlink Dir-815 Firmware The remote administration UI in D-Link DIR-815 devices with firmware before 2.07.B01 allows remote attackers to bypass intended access restrictions via unspecified vectors. network low complexity dlink CWE-284 critical	9.8
2018-04-12	CVE-2014-8888	Command Injection vulnerability in Dlink Dir-815 Firmware 2.03.B02 The remote administration interface in D-Link DIR-815 devices with firmware before 2.03.B02 allows remote attackers to execute arbitrary commands via vectors related to an "HTTP command injection issue." network low complexity dlink CWE-77 critical	9.8