Unscored severity · published Jan 13, 2015
CVE-2014-10026
index.cgi in D-Link DAP-1360 with firmware 2.5.4 and earlier allows remote attackers to bypass authentication and obtain sensitive information by setting the client_login cookie…
–
CVSS
2%
EPSS
No
On KEV
Description
index.cgi in D-Link DAP-1360 with firmware 2.5.4 and earlier allows remote attackers to bypass authentication and obtain sensitive information by setting the client_login cookie to admin.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DF
Dap-1360 Firmware · Dlink
through 2.5.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-10026
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-10026
Exploit
http://seclists.org/fulldisclosure/2014/Nov/19
Exploit
http://websecurity.com.ua/7179/
More from Dap-1360 Firmware
8.8
CVE-2023-32146
D-Link DAP-1360 Multiple Parameters Stack-Based Buffer Overflow Remote Code Execution Vulnerability
8.8
CVE-2023-32145
D-Link DAP-1360 Hardcoded Credentials Authentication Bypass Vulnerability
8.8
CVE-2023-32144
D-Link DAP-1360 webproc COMM_MakeCustomMsg Stack-based Buffer Overflow Remote Code Execution Vulnerability
8.8
CVE-2023-32143
D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution Vulnerability
8.8
CVE-2023-32142
D-Link DAP-1360 webproc var:page Stack-based Buffer Overflow Remote Code Execution Vulnerability