CVE-2014-4716

Cross-site request forgery (CSRF) vulnerability in Thomson TWG87OUIR allows remote attackers to hijack the authentication of unspecified victims for requests that change passwords via the Password and PasswordReEnter parameters to goform/RgSecurity.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

2.28% chance of exploitation in the next 30 days, 82th percentile

Published

2014-07-03

Updated

2024-09-16

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/33866

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/33866

References

• CVE Record
• NVD entry

Related

• CVE-2014-4710
• CVE-2014-4717
• CVE-2014-4703
• CVE-2014-4718
• CVE-2014-4701
• CVE-2014-4721