XSS in D-Link Dsl-2750u
CVE-2024-9792
A vulnerability classified as problematic has been found in D-Link DSL-2750U R5B017. This affects an unknown part of the component Port Forwarding Page. The manipulation of the argument PortMappingDescription leads to cross site scripting. It is possible to initiate the attack remotely.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.006 (46.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 2.4 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N.
Affected products
- D-link Dsl-2750u — versions R5B017
- Dlink Dsl-2750u
- Dlink Dsl-2750u_firmware — versions r5b017
Weakness classification (CWE)
References
- cna@vuldb.com (technical-description, Third Party Advisory, vdb-entry)
- cna@vuldb.com (signature, Permissions Required, permissions-required)
- cna@vuldb.com (Third Party Advisory, third-party-advisory)
- cna@vuldb.com (Product, product)
Frequently asked questions
- What is CVE-2024-9792?
- CVE-2024-9792 is a low-severity vulnerability in D-Link Dsl-2750u, classified under Cross-site Scripting. CVSS score: 2.4/10. Published 2024-10-10.
- How severe is CVE-2024-9792?
- Low severity. CVSS v3 base score is 2.4 out of 10.