CVE-2012-1922

🗓️ 24 Jan 2013 01:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 38 Views🌐 WEB

Sitecom WLM-2501 CSRF vulnerabilities allow hijacking of admin authentication for modifying settings

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2012-1922	24 Jan 201301:00	–	cvelist
EUVD	EUVD-2012-1931	7 Oct 202500:30	–	euvd
NVD	CVE-2012-1922	24 Jan 201301:55	–	nvd
Prion	Cross site request forgery (csrf)	24 Jan 201301:55	–	prion
RedhatCVE	CVE-2012-1922	22 May 202512:17	–	redhatcve

NVD

Node

Source	Link
webapp-security	www.webapp-security.com/wp-content/uploads/2012/03/Sitecom-WLM-2501-new-Multiple-CSRF-Vulnerabilities-1.txt
webapp-security	www.webapp-security.com/2012/03/sitecom-wlm-2501-multiple-csrf-vulnerabilities

Parameter	Position	Path	Description	CWE
Mac Filtering	request body	admin/formFilter	CSRF vulnerability enabling unauthorized modification of Mac Filtering settings.	CWE-352
IP/Port Filtering	request body	formFilter	CSRF vulnerability enabling unauthorized modification of IP/Port Filtering settings.	CWE-352
Port Forwarding	request body	formPortFw	CSRF vulnerability enabling unauthorized modification of Port Forwarding settings.	CWE-352
Wireless Access Control	request body	admin/formWlAc	CSRF vulnerability enabling unauthorized modification of Wireless Access Control settings.	CWE-352
Wi-Fi Protected Setup	request body	formWsc	CSRF vulnerability enabling unauthorized modification of WPS settings.	CWE-352
URL Blocking Filter	request body	formURL	CSRF vulnerability enabling unauthorized modification of URL Blocking Filter settings.	CWE-352
Domain Blocking Filter	request body	formDOMAINBLK	CSRF vulnerability enabling unauthorized modification of Domain Blocking Filter settings.	CWE-352
IP Address ACL Filter	request body	goform/admin/formACL	CSRF vulnerability enabling unauthorized modification of IP Address ACL Filter settings.	CWE-352

16 Jun 2026 23:40Current

7.3High risk

Vulners AI Score7.3

CVSS 26.8

EPSS0.01389