CVE-2012-1921

Cross-site request forgery (CSRF) vulnerability in goform/admin/formWlEncrypt in Sitecom WLM-2501 allows remote attackers to hijack the authentication of administrators for requests that change the router passphrase via the pskValue parameter.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2012-08-26

Last modified

2024-09-17

Weaknesses

CWE-352

Affected products

• Wlm-2501 (Sitecom)

References

• http://ivanobinetti.blogspot.com/2012/03/sitecom-wlm-2501-change-wireless.html
• http://packetstormsecurity.org/files/110770/Sitecom-WLM-2501-Cross-Site-Request-Forgery.html