CVE-2014-10025

Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP-1360 with firmware 2.5.4 and earlier allow remote attackers to hijack the authentication of unspecified users for requests that change the (1) Enable Wireless, (2) MBSSID, (3) BSSID, (4) Hide Access Point, (5) SSID, (6) Country, (7) Channel, (8) Wireless mode, or (9) Max Associated Clients setting via a crafted request to index.cgi.

Score
CVSS 2.0 6.8 Medium
Status
Modified - cve@mitre.org
Published
2015-01-13
Last modified
2024-09-16
Weaknesses
CWE-352

Affected products

References

 
 
© AVABIS GmbH privacypolicy about