CVE-2012-5319

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• D-Link DCS - 'security.cgi' Cross-Site Request Forgery2012-02-23 · remote · hardware · Verified
• D-Link DCS Series - Cross-Site Request Forgery (Change Admin Password)2012-02-22 · webapps · hardware

Impact

Cross-site request forgery (CSRF) vulnerability in setup/security.cgi in D-Link DCS-900, DCS-2000, and DCS-5300 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the rootpass parameter.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://www.exploit-db.com/exploits/18509
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73387
• http://www.exploit-db.com/exploits/18509
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73387