Lucene search

[email protected]CVE-2008-6823

HistoryJun 04, 2009 - 4:30 p.m.

CVE-2008-6823

2009-06-0416:30:00

CWE-352

[email protected]

web.nvd.nist.gov

csrf

vulnerability

a-link

wl54ap3

wl54ap2

access points

firmware

nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

79.8%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in the management interface on the A-LINK WL54AP3 and WL54AP2 access points before firmware 1.4.2-eng1 allow remote attackers to hijack the authentication of administrators for requests that (1) modify the network configuration via certain parameters to goform/formWanTcpipSetup or (2) modify credentials via certain parameters to goform/formPasswordSetup.

Affected configurations

NVD

Node

a-linkwl54ap2Range≤1.4.1

a-linkwl54ap2Match1.2.0

a-linkwl54ap2Match1.2.1

a-linkwl54ap2Match1.2.2

a-linkwl54ap2Match1.2.3

a-linkwl54ap2Match1.2.4

a-linkwl54ap2Match1.2.5

a-linkwl54ap2Match1.2.6

a-linkwl54ap2Match1.2.7

a-linkwl54ap2Match1.2.8

a-linkwl54ap2Match1.2.9

a-linkwl54ap2Match1.4.0

Node

a-linkwl54ap3Range≤1.4.1

a-linkwl54ap3Match1.2.0

a-linkwl54ap3Match1.2.1

a-linkwl54ap3Match1.2.2

a-linkwl54ap3Match1.2.3

a-linkwl54ap3Match1.2.4

a-linkwl54ap3Match1.2.5

a-linkwl54ap3Match1.2.6

a-linkwl54ap3Match1.2.7

a-linkwl54ap3Match1.2.8

a-linkwl54ap3Match1.2.9

a-linkwl54ap3Match1.4.0

CPENameOperatorVersion
a-link:wl54ap2a-link wl54ap2le1.4.1
a-link:wl54ap2a-link wl54ap2eq1.2.0
a-link:wl54ap2a-link wl54ap2eq1.2.1
a-link:wl54ap2a-link wl54ap2eq1.2.2
a-link:wl54ap2a-link wl54ap2eq1.2.3
a-link:wl54ap2a-link wl54ap2eq1.2.4
a-link:wl54ap2a-link wl54ap2eq1.2.5
a-link:wl54ap2a-link wl54ap2eq1.2.6
a-link:wl54ap2a-link wl54ap2eq1.2.7
a-link:wl54ap2a-link wl54ap2eq1.2.8

CPE	Name	Operator	Version
a-link:wl54ap2	a-link wl54ap2	le	1.4.1
a-link:wl54ap2	a-link wl54ap2	eq	1.2.0
a-link:wl54ap2	a-link wl54ap2	eq	1.2.1
a-link:wl54ap2	a-link wl54ap2	eq	1.2.2
a-link:wl54ap2	a-link wl54ap2	eq	1.2.3
a-link:wl54ap2	a-link wl54ap2	eq	1.2.4
a-link:wl54ap2	a-link wl54ap2	eq	1.2.5
a-link:wl54ap2	a-link wl54ap2	eq	1.2.6
a-link:wl54ap2	a-link wl54ap2	eq	1.2.7
a-link:wl54ap2	a-link wl54ap2	eq	1.2.8

Rows per page:

1-10 of 121

References

osvdb.org/49466

secunia.com/advisories/32421

www.a-link.com/WL54AP3.html

www.louhinetworks.fi/advisory/alink_081028.txt

www.osvdb.org/49465

www.securityfocus.com/archive/1/497997/100/0/threaded

www.securityfocus.com/bid/32008

exchange.xforce.ibmcloud.com/vulnerabilities/46255

exchange.xforce.ibmcloud.com/vulnerabilities/46256

www.exploit-db.com/exploits/6899

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

79.8%

JSON

Related for CVE-2008-6823

cvelist1 prion1 nvd1