CVE-2012-1921: CSRF
Cross-site request forgery (CSRF) vulnerability in goform/admin/formWlEncrypt in Sitecom WLM-2501 allows remote attackers to hijack the authentication of administrators for requests that change the router passphrase via the pskValue parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1921?
CVE-2012-1921 is classified as a high severity vulnerability due to its potential to allow remote attackers to hijack administrator sessions.
How do I fix CVE-2012-1921?
To fix CVE-2012-1921, users should ensure firmware is updated to the latest version provided by Sitecom that addresses the CSRF vulnerability.
Who is impacted by CVE-2012-1921?
Users of Sitecom WLM-2501 routers are impacted by CVE-2012-1921, particularly those with administrative access.
What type of attack does CVE-2012-1921 enable?
CVE-2012-1921 enables a cross-site request forgery (CSRF) attack, allowing an attacker to manipulate router settings.
What parameter is exploited in CVE-2012-1921?
The pskValue parameter is exploited in CVE-2012-1921 to change the router passphrase without proper authorization.