CVE-2013-7054

moderate-risk

Published 2020-02-04

D-Link DIR-100 4.03B07: cli.cgi XSS

Do I need to act?

14.5% chance of exploitation in next 30 days

EPSS score — higher than 86% of all CVEs

Not on CISA KEV list

No confirmed active exploitation reported to CISA

1 public exploit available

31425

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 6.1/10 Medium

NETWORK / LOW complexity

Dir-100 Firmware

Dlink

Exploit http://pigstarter.krebsco.de/report/2013-12-18_dir100.txt

Third Party Advisory https://exchange.xforce.ibmcloud.com/vulnerabilities/90906

Third Party Advisory https://www.securityfocus.com/bid/65290/info

Exploit http://pigstarter.krebsco.de/report/2013-12-18_dir100.txt

Third Party Advisory https://exchange.xforce.ibmcloud.com/vulnerabilities/90906

Third Party Advisory https://www.securityfocus.com/bid/65290/info

/ 100

moderate-risk

Severity 23/34 · High

Exploitability 12/34 · Low

Exposure 5/34 · Minimal