CVE-2012-5319

no score yetEPSS 1.1%

Cross-site request forgery (CSRF) vulnerability in setup/security.cgi in D-Link DCS-900, DCS-2000, and DCS-5300 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the rootpass parameter.

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2012-10-08
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

dlink:dcs-2000
dlink:dcs-5300
dlink:dcs-900

References

http://www.exploit-db.com/exploits/18509
https://exchange.xforce.ibmcloud.com/vulnerabilities/73387
http://www.exploit-db.com/exploits/18509
https://exchange.xforce.ibmcloud.com/vulnerabilities/73387

Check your stack JSON