This vulnerability affects the D-Link DSL-2740R router running firmware EU_01.15. It involves a cross-site scripting flaw in the Wireless Setup Section, where manipulation of the Wireless Network Name parameter can lead to script injection. The vulnerability can be exploited remotely without user interaction, but requires high privileges. The CVSS 4.0 base score is 4.8, indicating medium severity. No official remediation or patch has been confirmed as of the published date.

Successful exploitation allows an attacker to execute arbitrary scripts in the context of the affected device's web interface, potentially leading to session hijacking or unauthorized actions within the router's management interface. However, exploitation requires high privileges and user interaction, limiting the ease of attack. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should restrict access to the router's management interface to trusted networks and users only. Avoid exposing the router's web interface to untrusted networks. Monitor vendor communications for updates on patches or mitigations.