CVE-2012-5320

EPSS 1.1%

Cross-site request forgery (CSRF) vulnerability in password.cgi in Sagem F@ST 2604 253180972B allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/18504unverified exploitdbwww.exploit-db.com/exploits/18504unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/48088 https://exchange.xforce.ibmcloud.com/vulnerabilities/73380 http://www.exploit-db.com/exploits/18504 http://www.osvdb.org/79649