CVE-2014-3760: Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP 1150 with firmware 1.2.94 allow re...

Security readout for executives and security teams

This issue lets an attacker trick a logged-in administrator’s browser into changing settings on a D-Link DAP 1150 running firmware 1.2.94. The documented changes include enabling or disabling DMZ and altering URL-filter rules. It is not evidence of device takeover by itself, but it can weaken network controls or disrupt access policies. Exposure is likely limited to D-Link DAP 1150 devices running firmware 1.2.94 with accessible administrative web interfaces. Risk rises if administrators manage the device from general browsing sessions or if remote administration is reachable beyond a trusted network. Treat as a targeted network-appliance hardening item. Prioritize if these devices still protect business networks, expose admin access remotely, or manage sensitive segments. If the model is unsupported, plan replacement rather than relying on compensating controls indefinitely. Mitigation focus: Check D-Link guidance for fixed firmware or supported replacement options.; Restrict administrative access to trusted management networks only.; Disable remote administration unless explicitly required..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.