CVE-2017-7851

HIGH · CVSS 8.8 EPSS 2.45%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-11-15 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2017-7851

Severity

HIGH

CVSS

8.8

EPSS

2.45%

Original NVD Description

D-Link DCS-936L devices with firmware before 1.05.07 have an inadequate CSRF protection mechanism that requires the device's IP address to be a substring of the HTTP Referer header.