CVE-2014-3792

Cross-site request forgery (CSRF) vulnerability in Beetel 450TC2 Router with firmware TX6-0Q-005_retail allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the uiViewTools_Password and uiViewTools_PasswordConfirm parameters to Forms/tools_admin_1.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

2.28% chance of exploitation in the next 30 days, 82th percentile

Published

2014-05-20

Updated

2024-09-16

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/33129

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/33129

References

• CVE Record
• NVD entry

Related

• CVE-2014-3791
• CVE-2014-3804
• CVE-2014-3789
• CVE-2014-3805
• CVE-2014-3778
• CVE-2014-3806