high7.5Public exploit code
CVE-2015-4624
Hak5 WiFi Pineapple 2.0 through 2.3 uses predictable CSRF tokens.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Hak5 WiFi Pineapple 2.4 - Preconfiguration Command Injection (Metasploit)2016-10-20 · remote · linux · Verified
Impact
Hak5 WiFi Pineapple 2.0 through 2.3 uses predictable CSRF tokens.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hak5 | Wi-Fi Pineapple Firmware | Versions 2.0, 2.1, 2.2, 2.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/133052/WiFi-Pineapple-Predictable-CSRF-Token.html
- http://packetstormsecurity.com/files/139212/Hak5-WiFi-Pineapple-Preconfiguration-Command-Injection-2.html
- http://www.securityfocus.com/archive/1/536184/100/500/threaded
- https://www.exploit-db.com/exploits/40609/
- http://packetstormsecurity.com/files/133052/WiFi-Pineapple-Predictable-CSRF-Token.html
- http://packetstormsecurity.com/files/139212/Hak5-WiFi-Pineapple-Preconfiguration-Command-Injection-2.html
- http://www.securityfocus.com/archive/1/536184/100/500/threaded
- https://www.exploit-db.com/exploits/40609/