CVE-2013-5223

D-Link DSL-2760U gateway XSS flaw lets authenticated attackers inject scripts, exposing data and violating CMMC data integrity controls.

The D-Link DSL-2760U gateway contains a cross-site scripting (XSS) vulnerability allowing remote authenticated users to inject arbitrary web scripts or HTML. This failure matters to DIB organizations because it demonstrates D-Link's chronic neglect of firmware security, leading to potential data exfiltration and compliance violations under CMMC's strict supply chain and data protection requirements. Organizations should avoid D-Link hardware or enforce strict patching and network segmentation to mitigate risks from this vendor's historically poor security posture.

Shame score — D-Link's repeated pattern of unpatched and exploitable vulnerabilities across consumer firmware reflects a negligent, avoidable security posture that shreds trust and violates CMMC supply chain expectations.