CVE-2015-5991

Cross-site request forgery (CSRF) vulnerability in form2WlanSetup.cgi on Philippine Long Distance Telephone (PLDT) SpeedSurf 504AN devices with firmware GAN9.8U26-4-TX-R6B018-PH.EN and Kasda KW58293 devices allows remote attackers to hijack the authentication of administrators for requests that perform setup operations, as demonstrated by modifying network settings.

Score
CVSS 2.0 6.8 Medium
Status
Modified - cret@cert.org
Published
2015-09-21
Last modified
2024-08-06
Weaknesses
CWE-352

Affected products

References

 
 
© AVABIS GmbH privacypolicy about