Vulnerability · Published Oct 10, 2024 · Assigned by VulDB
CVE-2024-9792D-Link DSL-2750U Port Forwarding Page cross site scripting
Low 2.4
In plain English
A low-severity cross-site scripting in DSL-2750U from D-Link. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities).
Severity (CVSS 3.1)2.4Low
Exploit odds (30 days)0.7%top 47.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability classified as problematic has been found in D-Link DSL-2750U R5B017. This affects an unknown part of the component Port Forwarding Page. The manipulation of the argument PortMappingDescription leads to cross site scripting. It is possible to initiate the attack remotely.
Affected products (as reported)
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
References
- VDB-279945 | D-Link DSL-2750U Port Forwarding Page cross site scripting vdb-entry, technical-description
- VDB-279945 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #415532 | D-Link DSL-2750U R5B017 Cross Site Scripting third-party-advisory
- https://www.dlink.com/ product