EXHIBIT 7 

REDACTED 

PUBLIC VERSION

Case 3:17-cv-00039-JD Document 256-15 Filed 01/04/19 Page 1 of 8
Exhibit 42 

To Declaration of Jarad Brown in Support of 

Federal Trade Commission’s 

Motion for Summary Judgment 

Case 3:17-cv-00039-JD Document 256-15 Filed 01/04/19 Page 2 of 8
Case 3:17-cv-00039-JD Document 256-15 Filed 01/04/19 Page 3 of 8
Case 3:17-cv-00039-JD Document 256-15 Filed 01/04/19 Page 4 of 8
From: Daniel Hsu 

Sent: Saturday, February 23, 2013 2:17 AM 

To: William Brown 

Cc: Rachel Lai; Hans Liu; Shinglin Chung 

Subject: RE: DIR-645 Security Vulnerability Report -WAN-side unauthenticated attacker to access admin privileges 

Dear William 

Here are the report from Messner and the list of security exploits with my comment. Most of the them are related to 

Cross-site request forgery and Cross-site scripting. For the past 2 weeks we can't clarify all of the issues reported 

because of lacking info and the tool/environment setting for replicating security exploits in DHQ and the vendor. 

I've listed out and highlighted the remaining issues in the worksheet of each model and need your help for further 

verification and digging out the info we need. Thank you! 

Best Regards 

Daniel 

Daniel Hsu, Product Planner 

WPD2 

D-Link Corporation

Tel: 02-66000123 Ext: 5838

From: William Brown 

Sent: Saturday, February 23, 2013 1:10 AM 

To: Daniel Hsu 

Cc: Rachel Lai; Hans Liu; Shinglin Chung 

Subject: Re: DIR-645 Security Vulnerability Report -WAN-side unauthenticated attacker to access admin privileges 

Good Day Daniel, 

Roberto is located in Italy, I just got chatted with him now 9am PST US. 

I verified that this issue on the DIR-645 is not the same attack as was described on the DIR-300/DIR-600 by Michael 

Messner decribed with script here: (http:/ /bit.ly/UMXNsr) 

He said that the DIR-645 doesn't have the command.php required for that attack. 

He is writing up is analysis and submitting for bounty. 

Thank You, 

wb 

[cid:part2.05090803.04070607@dlink.com] 

Daniel Hsu<mailto:Daniel_Hsu@dlink.com.tw> 

February 21, 2013 6:44 PM 

Dear Rachel 

3 

CON Fl DENTIAL DLS0023967 

Case 3:17-cv-00039-JD Document 256-15 Filed 01/04/19 Page 5 of 8
Just talked with Shinglin. Today I will come out a list of reported vulnerability that we want Roberto's help for checking 

and verification. 

Best Regards 

Daniel 

Daniel Hsu, Product Planner 

WPD2 

D-Link Corporation

Tel: 02-66000123 Ext: 5838

�tHJHt-J iPad ffj! 

"William Brown" <william.brown@dlink.com><mailto:william.brown@dlink.com> 'Ji� 2013/2/22 ...tlf-6:48 �� 

[cid:part2.05090803.04070607@dlink.com] 

William Brown<mailto:william.brown@dlink.com> 

February 21, 2013 2:48 PM 

Good Day Hans, 

One of the security experts I work with on a frequent basis is reporting that Messner vulnerability 

(http:/ /bit.ly/14EdMtq) that came out of Europe a couple of weeks ago. 

I stopped him from filing the report because I felt we already know the issue. 

Messner reported that we don't understand the scope of the issue, which is the same as my expert ( Roberto Paleari 

<roberto@greyhats.it><mailto:roberto@greyhats.it> who you can reference online). 

They both say, it doesn't require remote access to be turned on, if it is then you must use the port specified in the web 

config, but a simple port scanner can report which port. 

I know you have researched and responded, can you tell me what is our current position? 

If we need details from Roberto, he is happy to file and claim the bounty. 

Please advise, 

wb 

[cid:part1.08080404.04030007@dlink.com] 

William Brown<mailto:william.brown@dlink.com> 

February 22, 2013 9:10 AM 

Good Day Daniel, 

Roberto is located in Italy, I just got chatted with him now 9am PST US. 

I verified that this issue on the DIR-645 is not the same attack as was described on the DIR-300/DIR-600 by Michael 

Messner decribed with script here: (http:/ /bit.ly/UMXNsr) 

He said that the DIR-645 doesn't have the command.php required for that attack. 

He is writing up is analysis and submitting for bounty. 

4 

CON Fl DENTIAL DLS0023968 

Case 3:17-cv-00039-JD Document 256-15 Filed 01/04/19 Page 6 of 8
Case 3:17-cv-00039-JD Document 256-15 Filed 01/04/19 Page 7 of 8
One of the security experts I work with on a frequent basis is reporting that Messner vulnerability 

(http:/ /bit.ly/14EdMtq) that came out of Europe a couple of weeks ago. 

I stopped him from filing the report because I felt we already know the issue. 

Messner reported that we don't understand the scope of the issue, which is the same as my expert ( Roberto Paleari 

<roberto@greyhats.it><mailto:roberto@greyhats.it> who you can reference online). 

They both say, it doesn't require remote access to be turned on, if it is then you must use the port specified in the web 

config, but a simple port scanner can report which port. 

I know you have researched and responded, can you tell me what is our current position? 

If we need details from Roberto, he is happy to file and claim the bounty. 

Please advise, 

wb 

6 

CON Fl DENTIAL DLS0023970 

Case 3:17-cv-00039-JD Document 256-15 Filed 01/04/19 Page 8 of 8