8

CVE-2014-100005: D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability

CVSS: 8.0v3.1HighKEVAnalyzed
Published 13-01-2015Last modified 22-10-2025
Open JSON

Vulnerability summary

CVE-2014-100005 is a high (CVSS 8.0) Cross-Site Request Forgery (CSRF) vulnerability in D-Link DIR-600 Router. It is known to be exploited: CISA lists it, first on 16-05-2024. EPSS estimates a 43.46% chance of exploitation in the next 30 days, higher than 98.7% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk
85/100
0100
Critical · default modelHow is this calculated?
CVSS score
8.0/10
010
High · v3.1 (CVE.org)
EPSS score
43.46%
0%100%
High · 0.00 pp in 30 days
KEVListedCISA
RansomwareNone recordedNo known use recorded
Public exploits2reference, metasploit

Timeline

  1. 13-01-2015
    PublishedVulnerability first disclosed.
  2. 16-05-2024
    Added to CISA KEVD-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability
  3. 06-06-2024
    CISA remediation dueApply mitigations per vendor instructions.
  4. 22-10-2025
    Last modifiedVulnerability information updated.

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx) with firmware before 2.17b02 allow remote attackers to hijack the authentication of administrators for requests that (1) create an administrator account or (2) enable remote management via a crafted configuration module to hedwig.cgi, (3) activate new configuration settings via a SETCFG,SAVE,ACTIVATE action to pigwidgeon.cgi, or (4) send a ping via a ping action to diagnostic.php.

CVSS metrics

3 scores · 2 sources · 2 versions

EPSS trend

Probability

43.46%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 43.46% on 19-09-2026

19-09-202619-10-2026
EPSS score
43.46%

Known exploited

Compare KEV catalogs
CISA KEVListed
Added
16-05-2024
Federal due date
06-06-2024

CISA required action

This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions. legacy.us.dlink.com/pages/product.aspx?id=4587b63118524aec911191cc81605283 nvd.nist.gov/vuln/detail/CVE-2014-100005

Public exploits

2 found
  • referenceUnverified

    Exploit Reference (resources.infosecinstitute.com)

    Maturity: unknown

  • MetasploitMetasploitremoteVerified

    D-Link DIR-645 / DIR-815 diagnostic.php Command Execution

    exploit/linux/http/dlink_diagnostic_exec_noauth

    Maturity: weaponized

Weaknesses

CWE · root cause

Affected systems

Dlink1 product

1 vendor · 1 product

References

5 links