Lucene search

K
cve[email protected]CVE-2014-10019
HistoryJan 13, 2015 - 11:59 a.m.

CVE-2014-10019

2015-01-1311:59:27
CWE-352
web.nvd.nist.gov
23
cve-2014-10019
csrf
vulnerabilities
teracom
t2-b-gawv1.4u10y-bi
modem

7.5 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

64.5%

Multiple cross-site request forgery (CSRF) vulnerabilities in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allow remote attackers to hijack the authentication of administrators for requests that (1) change the SSID or (2) change the password via a crafted request.

Affected configurations

NVD
Node
teracomt2-b-gawv1.4u10y-bi

7.5 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

64.5%

Related for CVE-2014-10019