Vulnerability Details CVE-2012-5320
Cross-site request forgery (CSRF) vulnerability in password.cgi in Sagem F@ST 2604 253180972B allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.8%
CVSS Severity
CVSS v2 Score 6.8
References
- http://secunia.com/advisories/48088
- http://www.exploit-db.com/exploits/18504
- http://www.osvdb.org/79649
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73380
- http://secunia.com/advisories/48088
- http://www.exploit-db.com/exploits/18504
- http://www.osvdb.org/79649
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73380
Products affected by CVE-2012-5320
-
cpe:2.3:h:sagem:f@st_2604:-
-
cpe:2.3:o:sagem:f@st_2604_firmware:253180972b