Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2012-1308

CWE-352 — Cross-Site Request Forgery (CSRF)6 documents4 sources
Severity
6.8MEDIUM
EPSS
7.1%
top 8.47%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Dlink Dsl-2640b Firmware
Timeline
PublishedOct 8
Latest updateMay 17

Description

Cross-site request forgery (CSRF) vulnerability in redpass.cgi in D-Link DSL-2640B Firmware EU_4.00 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-8rw3-9ghr-xp9p: Cross-site request forgery (CSRF) vulnerability in redpass↗2022-05-17
▶
CVEList
CVE-2012-1308: Cross-site request forgery (CSRF) vulnerability in redpass↗2012-10-08
▶

💥Exploits & PoCs

1
Exploit-DB
D-Link DSL-2640B ADSL Router - Cross-Site Request Forgery↗2012-02-20
▶
CVE-2012-1308 (MEDIUM CVSS 6.8) | Cross-site request forgery (CSRF) v | cvebase.io