CVE-2017-9542

9.8 criticalEPSS 5.1%

Critical (9.8) in d-link dir-615 firmware. EPSS 5.1% chance of exploitation in the next 30 days.

D-Link DIR-615 Wireless N 300 Router allows authentication bypass via a modified POST request to login.cgi. This issue occurs because it fails to validate the password field. Successful exploitation of this issue allows an attacker to take control of the affected device.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 5.1% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2017-06-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

d-link:dir-615_firmware

References

http://www.securityfocus.com/bid/98992
https://twitter.com/tiger_tigerboy/status/873458088321220609
https://www.facebook.com/tigerBOY777/videos/1368513696568992/
http://www.securityfocus.com/bid/98992
https://twitter.com/tiger_tigerboy/status/873458088321220609

Check your stack JSON