Vulnerability Report

CVE-2017-5633

Title: Dlink Di-524 Path Traversal / LFI

Arbitrary File Access

Proof Of Concept

PoC Available for CVE-2017-5633

CWE Category CWE-352

Published Date Mar 06, 2017

Modified Date Jun 17, 2026

Exploit Status Available

Score 8.0 CVSS v3.0

Exploit Probability (EPSS)

3.96%

Vulnerability Summary

CVE-2017-5633: Multiple cross-site request forgery (CSRF) vulnerabilities on the D-Link DI-524 Wireless Router with firmware 9.01 allow remote attackers to (1) change the admin password, (2) reboot the device, or (3) possibly have unspecified other impact via crafted requests to CGI programs.

Impacted Vendors

d-link 1

dlink 1

Reference Links

http://seclists.org/fulldisclosure/2017/Feb/70 http://www.securityfocus.com/bid/96475 http://seclists.org/fulldisclosure/2017/Feb/70 http://www.securityfocus.com/bid/96475

CVSS v3.0

Source Entity [email protected]

Severity HIGH

8.0

Attack Vector

NETWORK

Complexity

LOW

Privileges

N/A

Interaction

REQUIRED

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

UNCHANGED

RAW VECTOR CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0

Source Entity [email protected]

Severity HIGH

8.5

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:M/Au:S/C:C/I:C/A:C

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2017-5633 Exploits & PoCs (Proof Of Concept)

GitHub https://github.com/cardangi/Exploit-CVE-2017-5633

View Code

Exploit-DB https://www.exploit-db.com/exploits/40983

View Code

June 17, 2026 MODIFIED