CVE-2012-1922: CSRF
Multiple cross-site request forgery (CSRF) vulnerabilities in Sitecom WLM-2501 allow remote attackers to hijack the authentication of administrators for requests that modify settings for (1) Mac Filtering via admin/formFilter, (2) IP/Port Filtering via formFilter, (3) Port Forwarding via formPortFw, (4) Wireless Access Control via admin/formWlAc, (5) Wi-Fi Protected Setup via formWsc, (6) URL Blocking Filter via formURL, (7) Domain Blocking Filter via formDOMAINBLK, and (8) IP Address ACL Filter via admin/formACL in goform/, different vectors than CVE-2012-1921.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1922?
CVE-2012-1922 is considered a medium severity vulnerability due to its potential to allow remote attackers to hijack administrative sessions.
How do I fix CVE-2012-1922?
To fix CVE-2012-1922, it is recommended to update the Sitecom WLM-2501 firmware to the latest version provided by the manufacturer.
What types of attacks are possible with CVE-2012-1922?
CVE-2012-1922 can be exploited by attackers to perform cross-site request forgery (CSRF) attacks, allowing unauthorized changes to device settings.
Who is affected by CVE-2012-1922?
CVE-2012-1922 affects users of the Sitecom WLM-2501 router who have not secured their administrative access.
What is CSRF in the context of CVE-2012-1922?
In the context of CVE-2012-1922, CSRF refers to a vulnerability where an attacker can exploit the trust a website has in the user's browser to perform unauthorized actions.