What is CVE-2013-6811?

CVE-2013-6811 is a high-severity vulnerability in D-Link Dsl6740u, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.8/10. Published 2019-11-22.

How severe is CVE-2013-6811?

High severity. CVSS v3 base score is 8.8 out of 10.

CSRF in D-Link Dsl6740u

CVE-2013-6811

Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DSL-6740U gateway (Rev. H1) allow remote attackers to hijack the authentication of administrators for requests that change administrator credentials or enable remote management services to (1) Custom Services in Port Forwarding, (2) Port Triggering Entries, (3) URL Filters in Parental Control, (4) Print Server settings, (5) QoS Queue Setup, or (6) QoS Classification Entries.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.010 (58.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

D-link Dsl6740u — versions h1
D-link Dsl6740u_firmware
N/a — versions n/a

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

References

cve@mitre.org (VDB Entry, Third Party Advisory, x_refsource_MISC)
cve@mitre.org (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2013-6811?: CVE-2013-6811 is a high-severity vulnerability in D-Link Dsl6740u, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.8/10. Published 2019-11-22.
How severe is CVE-2013-6811?: High severity. CVSS v3 base score is 8.8 out of 10.