This vulnerability affects the D-Link DSL-2740R router running firmware EU_01.15. It involves a cross-site scripting flaw in the Wireless Setup Section, where manipulation of the Wireless Network Name parameter can lead to script injection. The vulnerability can be exploited remotely without user interaction but requires high privileges (PR:H) and has limited impact on confidentiality and integrity. The vulnerability is identified as CWE-79 (Improper Neutralization of Input During Web Page Generation) and CWE-94 (Improper Control of Generation of Code). No official fix or patch is currently available.

Successful exploitation allows an attacker with high privileges to inject malicious scripts via the Wireless Network Name parameter, potentially leading to cross-site scripting attacks. This could result in limited impact on the confidentiality and integrity of the affected device's web interface. The vulnerability does not affect system availability or security controls and requires user interaction. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the router's management interface to trusted users only and avoid using untrusted input for the Wireless Network Name. Monitor vendor communications for updates on patches or official mitigations.