medium6.8Public exploit code
CVE-2012-1921
Cross-site request forgery (CSRF) vulnerability in goform/admin/formWlEncrypt in Sitecom WLM-2501 allows remote attackers to hijack the authentication of admin…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sitecom WLM-2501 - Multiple Cross-Site Request Forgery Vulnerabilities2012-03-23 · webapps · asp
- Sitecom WLM-2501 - Cross-Site Request Forgery2012-03-14 · webapps · hardware
Impact
Cross-site request forgery (CSRF) vulnerability in goform/admin/formWlEncrypt in Sitecom WLM-2501 allows remote attackers to hijack the authentication of administrators for requests that change the router passphrase via the pskValue parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sitecom | Wlm-2501 | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://ivanobinetti.blogspot.com/2012/03/sitecom-wlm-2501-change-wireless.html
- http://packetstormsecurity.org/files/110770/Sitecom-WLM-2501-Cross-Site-Request-Forgery.html
- http://ivanobinetti.blogspot.com/2012/03/sitecom-wlm-2501-change-wireless.html
- http://packetstormsecurity.org/files/110770/Sitecom-WLM-2501-Cross-Site-Request-Forgery.html