Is CVE-2014-100005 actively exploited?

Yes. CVE-2014-100005 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, which means exploitation in the wild has been confirmed.

Can CVE-2014-100005 be exploited remotely?

The attack vector of CVE-2014-100005 has not been classified yet.

What is the CVSS score of CVE-2014-100005?

CVE-2014-100005 has not received a CVSS score yet.

HOME VULNERABILITIESCVE-2014-100005

HIGHCISA KEVIN THE WILD

CVE-2014-100005

Published: May 16, 2024

EPSS:40.76%probability of exploitation in 30 daysPercentile:97.3th

Official Description

D-Link DIR-600 routers contain a cross-site request forgery (CSRF) vulnerability that allows an attacker to change router configurations by hijacking an existing administrator session.

NVD Source

CISA KEV Advisory

D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability

D-Link DIR-600 routers contain a cross-site request forgery (CSRF) vulnerability that allows an attacker to change router configurations by hijacking an existing administrator session.

Added to KEV: 2024-05-16Federal patch deadline: 2024-06-06

Required Action (CISA)

This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.

Risk Analysis

A cross-site request forgery (CSRF) vulnerability in D-Link DIR-600 routers allows an attacker to change router configurations by hijacking an existing administrator session. With an EPSS score of 0.40758 and inclusion in CISA's KEV, this vulnerability is actively exploited, posing a significant risk to the integrity of router settings.

This vulnerability is actively exploited in the wild and is listed in CISA's KEV. Exploitation typically involves tricking an authenticated administrator into clicking a malicious link.

Recommended Action

Replace D-Link DIR-600 routers with supported models that receive security updates. If replacement is not immediately possible, ensure administrators log out of the router interface when not in use and practice caution with untrusted links.

Generated by the CTIWATCH analysis pipeline from this CVE's metadata (CVSS, EPSS, KEV status, exploit intelligence). Verify against vendor advisories before acting.

Technical Analysis

CVE-2014-100005 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CISA has added CVE-2014-100005 to the Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild. U.S. federal agencies are required to patch this within the mandated timeframe, and all organizations should treat remediation as urgent.