CVE-2013-6852: CSRF
Cross-site request forgery (CSRF) vulnerability in html/json.html on HP 2620 switches allows remote attackers to hijack the authentication of administrators for requests that change an administrative password via the setPassword method.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6852?
CVE-2013-6852 is considered to have a medium severity due to its potential impact on the authentication of administrators.
How do I fix CVE-2013-6852?
To fix CVE-2013-6852, ensure that you implement CSRF protection measures and update to the latest firmware provided by HP.
Who is affected by CVE-2013-6852?
CVE-2013-6852 affects users of HP 2620 switches that allow administrative password changes via the impacted interface.
What type of attack is described in CVE-2013-6852?
CVE-2013-6852 describes a Cross-site Request Forgery (CSRF) vulnerability.
What actions can an attacker take with CVE-2013-6852?
An attacker can hijack the authentication of administrators and potentially change administrative passwords through the affected method.