CVE-2017-5633

8.0 highEPSS 4.0%

Multiple cross-site request forgery (CSRF) vulnerabilities on the D-Link DI-524 Wireless Router with firmware 9.01 allow remote attackers to (1) change the admin password, (2) reboot the device, or (3) possibly have unspecified other impact via crafted requests to CGI programs.

Severity

CVSS 3.0

8.0 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS: 4.0% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2017-03-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

d-link:di-524_firmware

References

http://seclists.org/fulldisclosure/2017/Feb/70
http://www.securityfocus.com/bid/96475
http://seclists.org/fulldisclosure/2017/Feb/70
http://www.securityfocus.com/bid/96475

Check your stack JSON