medium6.8Public exploit code
CVE-2013-6852
Cross-site request forgery (CSRF) vulnerability in html/json.html on HP 2620 switches allows remote attackers to hijack the authentication of administrators fo…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Hewlett-Packard (HP) 2620 Switch Series. Edit Admin Account - Cross-Site Request Forgery2013-09-26 · webapps · hardware
Impact
Cross-site request forgery (CSRF) vulnerability in html/json.html on HP 2620 switches allows remote attackers to hijack the authentication of administrators for requests that change an administrative password via the setPassword method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | 2620-24-Poe\+ Switch | All versions |