medium6.8Public exploit code
CVE-2014-4716
Cross-site request forgery (CSRF) vulnerability in Thomson TWG87OUIR allows remote attackers to hijack the authentication of unspecified victims for requests t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Thomson TWG87OUIR - POST Password Cross-Site Request Forgery2014-06-25 · webapps · hardware
Impact
Cross-site request forgery (CSRF) vulnerability in Thomson TWG87OUIR allows remote attackers to hijack the authentication of unspecified victims for requests that change passwords via the Password and PasswordReEnter parameters to goform/RgSecurity.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thomson | Twg87ouir | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/show/osvdb/108397
- http://packetstormsecurity.com/files/127244/Thomson-TWG87OUIR-Cross-Site-Request-Forgery.html
- http://www.exploit-db.com/exploits/33866
- http://osvdb.org/show/osvdb/108397
- http://packetstormsecurity.com/files/127244/Thomson-TWG87OUIR-Cross-Site-Request-Forgery.html
- http://www.exploit-db.com/exploits/33866