CVE-2017-5633

Name of the Vulnerable Software and Affected Versions D-Link DI-524 Wireless Router version 9.01

Description The issue affects the D-Link DI-524 Wireless Router, allowing remote attackers to perform certain actions due to multiple cross-site request forgery (CSRF) vulnerabilities. These actions include changing the admin password, rebooting the device, or possibly having other unspecified impacts. This is achieved through crafted requests to CGI programs.

Recommendations For D-Link DI-524 Wireless Router version 9.01, consider disabling access to CGI programs as a temporary workaround until a patch is available. Restrict access to the admin interface to minimize the risk of exploitation. Avoid using the device for critical operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.