Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2014-4162

CWE-352 — Cross-Site Request Forgery (CSRF)4 documents4 sources
Severity
6.8MEDIUM
EPSS
0.4%
top 37.01%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Zyxel P-660hw
Timeline
PublishedJun 16
Latest updateMay 17

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the Zyxel P-660HW-T1 (v3) wireless router allow remote attackers to hijack the authentication of administrators for requests that change the (1) wifi password or (2) SSID via a request to Forms/WLAN_General_1.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages1 packages

▶NVDzyxel/p-660hw_t1

🔴Vulnerability Details

2
GHSA
GHSA-cwpg-mv72-89pc: Multiple cross-site request forgery (CSRF) vulnerabilities in the Zyxel P-660HW-T1 (v3) wireless router allow remote attackers to hijack the authentic↗2022-05-17
▶
CVEList
CVE-2014-4162: Multiple cross-site request forgery (CSRF) vulnerabilities in the Zyxel P-660HW-T1 (v3) wireless router allow remote attackers to hijack the authentic↗2014-06-16
▶

💥Exploits & PoCs

1
Exploit-DB
ZYXEL P-660HW-T1 3 Wireless Router - Cross-Site Request Forgery↗2014-05-26
▶