https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 19:56:25 +0000 https://cve.radiocsirt.org/vuln/cve-2017-7405 <p>On the D-Link DIR-615 before v20.12PTb04, once authenticated, this device identifies the user based on the IP address of his machine. By spoofing the IP address belonging to the victim&#39;s host, an attacker might be able to take over the administrative session without being prompted for authentication credentials. An attacker can get the victim&#39;s and router&#39;s IP addresses by simply sniffing the network traffic. Moreover, if the victim has web access enabled on his router and is accessing the web interface from a different network that is behind the NAT/Proxy, an attacker can sniff the network traffic to know the public IP address of the victim&#39;s router and take over his session as he won&#39;t be prompted for credentials.</p> <p>On the D-Link DIR-615 before v20.12PTb04, once authenticated, this device identifies the user based on the IP address of his machine. By spoofing the IP address belonging to the victim&#39;s host, an attacker might be able to take over the administrative session without being prompted for authentication credentials. An attacker can get the victim&#39;s and router&#39;s IP addresses by simply sniffing the network traffic. Moreover, if the victim has web access enabled on his router and is accessing the web interface from a different network that is behind the NAT/Proxy, an attacker can sniff the network traffic to know the public IP address of the victim&#39;s router and take over his session as he won&#39;t be prompted for credentials.</p> https://cve.radiocsirt.org/vuln/cve-2017-7405