CVE-2013-7471: exploitation status and patch state
CVE-2013-7471 · CVSS 9.8 CRITICAL · EPSS 24%
An issue was discovered in soap.cgi?service=WANIPConn1 on D-Link DIR-845 before v1.02b03, DIR-600 before v2.17b01, DIR-645 before v1.04b11, DIR-300 rev. B, and DIR-865 devices. There is Command Injection via shell metacharacters in the NewInternalClient, NewExternalPort, or NewInternalPort element of a SOAP POST request.
Is CVE-2013-7471 exploited?
Not in the CISA KEV catalog.
EPSS puts exploitation in the next 30 days at 24%.
Public exploit code: none found in monitored sources.
Which products and versions are affected?
No affected package list recorded here yet.
Is there a patch?
No patch identifier recorded here yet.
What PlainSec published about CVE-2013-7471
PlainSec has not published a story about this CVE.