medium6.8Public exploit code
CVE-2014-3792
Cross-site request forgery (CSRF) vulnerability in Beetel 450TC2 Router with firmware TX6-0Q-005_retail allows remote attackers to hijack the authentication of…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Beetel 450TC2 Router - Cross-Site Request Forgery (Admin Password)2014-04-30 · webapps · hardware
Impact
Cross-site request forgery (CSRF) vulnerability in Beetel 450TC2 Router with firmware TX6-0Q-005_retail allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the uiViewTools_Password and uiViewTools_PasswordConfirm parameters to Forms/tools_admin_1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Beetel | 450tc2 Router Firmware | Version tx6-0q-005_retail |
| Beetel | 450tc2 Router | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/show/osvdb/106468
- http://packetstormsecurity.com/files/126426/Beetel-450TC2-Cross-Site-Request-Forgery.html
- http://secunia.com/advisories/58365
- http://www.exploit-db.com/exploits/33129
- http://osvdb.org/show/osvdb/106468
- http://packetstormsecurity.com/files/126426/Beetel-450TC2-Cross-Site-Request-Forgery.html
- http://secunia.com/advisories/58365
- http://www.exploit-db.com/exploits/33129