CVE-2013-5945
CVSS v3
9.8
CRITICAL
EPSS Score
10.5 %
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Description
Multiple SQL injection vulnerabilities in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 allow remote attackers to execute arbitrary SQL commands via the password to (1) the login.authenticate function in share/lua/5.1/teamf1lualib/login.lua or (2) captivePortal.lua.
Technical details
- Published
- 2020-02-11
- Exploit-DB
- EDB-30062
Frequently asked questions
What is CVE-2013-5945?
Multiple SQL injection vulnerabilities in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 allow remote attackers to execute arbitrary SQL commands via the password to (1) the login.authenticate function in share/lua/5.1/teamf1lualib/login.lua or (2) captivePortal.lua.
Is CVE-2013-5945 actively exploited?
Active exploitation of CVE-2013-5945 has not been confirmed. The EPSS score is 10.5%, indicating the estimated probability of exploitation in the next 30 days.
What is the CVSS score for CVE-2013-5945?
CVE-2013-5945 has a CVSS v3 base score of 9.8 (CRITICAL severity).
Is CVE-2013-5945 affecting your environment?
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
No credit card required · 500 free checks/month · Free API key
Other 2013 vulnerabilities worth triaging
Ranked by exploit probability (EPSS).