CVE-2013-5223
D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability
Description
CVE-2013-5223 is a medium-severity cross-site scripting (XSS) vulnerability affecting D-Link DSL-2760U. A cross-site scripting (XSS) vulnerability exists in the D-Link DSL-2760U gateway, allowing remote authenticated users to inject arbitrary web script or HTML. An attacker can exploit this flaw with low privileges over the network, requiring user interaction. CISA has added this vulnerability to the Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. The EPSS score of 35.46% (97.0th percentile) indicates a significantly elevated exploitation probability.
KEV Information
CVSS Score
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NOpen in CalculatorAffected Products
| Vendor | Product | Version |
|---|---|---|
| dlink | dsl-2760u firmware | < 1.12 |
Multiple CVSS Assessments
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
References
- http://osvdb.org/99603(Broken Link)
- http://osvdb.org/99604(Broken Link)
- http://osvdb.org/99605(Broken Link)
- http://osvdb.org/99606(Broken Link)
- http://osvdb.org/99607(Broken Link)
- http://osvdb.org/99608(Broken Link)
- http://osvdb.org/99609(Broken Link)
- http://osvdb.org/99610(Broken Link)
- http://osvdb.org/99611(Broken Link)
- http://osvdb.org/99612(Broken Link)
- http://osvdb.org/99613(Broken Link)
- http://osvdb.org/99615(Broken Link)
- http://osvdb.org/99616(Broken Link)
- http://packetstormsecurity.com/files/123976(Exploit, Third Party Advisory, VDB Entry)
- http://seclists.org/fulldisclosure/2013/Nov/76(Exploit, Mailing List, Third Party Advisory)
- http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10002(Vendor Advisory)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88723(Third Party Advisory, VDB Entry)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88724(Third Party Advisory, VDB Entry)
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-5223(US Government Resource)
Weakness Type
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Cross-site Scripting (XSS) is a vulnerability that occurs when software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page served to other users. XSS enables attackers to inject malicious client-side scripts into web pages viewed by other users. In the case of CVE-2013-5223, this weakness allows attackers to compromise D-Link DSL-2760U systems.
Learn more: CWE-79 — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Impact Analysis
CVE-2013-5223 carries a CVSS 3.1 base score of 5.4 (MEDIUM), reflecting the serious risk it poses to affected environments. Successful exploitation can lead to limited information disclosure, limited integrity impact, and no direct availability impact. The attack vector is network-based with low complexity, meaning exploitation is straightforward and can be reliably repeated. Organizations running D-Link DSL-2760U face tangible risk of unauthorized access, data breaches, and operational disruption if this vulnerability remains unpatched.
Exploit Maturity
CVE-2013-5223 is listed in the CISA Known Exploited Vulnerabilities catalog with a remediation deadline of 2022-04-15, confirming that real-world exploitation has been observed. The EPSS score of 35.46% (97.0th percentile) places this vulnerability among those most likely to be exploited. Public exploit code is available in vulnerability databases, lowering the barrier for attackers and increasing the urgency of remediation.
Remediation
- Apply updates per vendor instructions. This is the CISA-mandated remediation action and should be prioritized immediately.
- If patches cannot be applied immediately, restrict network access to the affected DSL-2760U management interfaces to only trusted administrative networks using firewall rules or access control lists.
- Monitor vendor security advisories for additional updates and ensure a patch management process is in place for timely deployment.
- Conduct a thorough review of affected systems for signs of prior compromise, including unexpected user accounts, modified configurations, and unusual network activity.
- Implement defense-in-depth measures including network segmentation, intrusion detection systems, and continuous security monitoring for the affected infrastructure.
Technical Details
CVE-2013-5223 is exploitable remotely over the network with low-level user credentials. A cross-site scripting (XSS) vulnerability exists in the D-Link DSL-2760U gateway, allowing remote authenticated users to inject arbitrary web script or HTML. The attack complexity is rated low, meaning no specialized conditions or preparation are needed beyond network access to the target. The vulnerability has a changed scope, meaning exploitation can impact resources beyond the vulnerable component itself. The CVSS 3.1 base score of 5.4 reflects the combination of these factors and the potential for significant damage to affected systems.
Frequently Asked Questions
Is CVE-2013-5223 being actively exploited?
Yes. CISA has confirmed active exploitation by adding CVE-2013-5223 to the Known Exploited Vulnerabilities catalog. The EPSS score of 35.46% (97.0th percentile) further indicates high exploitation likelihood.
What products are affected by CVE-2013-5223?
CVE-2013-5223 affects D-Link DSL-2760U.
How do I fix CVE-2013-5223?
Apply updates per vendor instructions. Ensure your systems are updated to the latest patched version. If immediate patching is not feasible, restrict network access to the affected system's management interfaces.
How severe is CVE-2013-5223?
CVE-2013-5223 has a CVSS 3.1 score of 5.4 (MEDIUM). While not rated critical, this vulnerability has been confirmed as actively exploited and should be addressed promptly. The vulnerability enables authenticated remote attackers to potentially compromise affected DSL-2760U systems.
Need Help With Vulnerability Management?
Our security experts can help you prioritize and remediate vulnerabilities effectively.