Lucene search
HistoryOct 03, 2022 - 4:14 p.m.
CVE-2013-6852
cve-2013-6852
cross-site request forgery
csrf
hp 2620 switches
administrative password hijack
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
48.5%
Cross-site request forgery (CSRF) vulnerability in html/json.html on HP 2620 switches allows remote attackers to hijack the authentication of administrators for requests that change an administrative password via the setPassword method.
Affected configurations
Node
hp2620-24-poe\+_switchMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| hp:2620-24-poe\+_switch | hp 2620-24-poe+ switch | eq | - |
References
Related
prion
prion
Cross site request forgery (csrf)
2013-11-22 01:55:00
nvd
nvd
CVE-2013-6852
2013-11-22 01:55:04
cvelist
cvelist
CVE-2013-6852
2022-10-03 16:14:50
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
48.5%
Related for CVE-2013-6852