Lucene search
PRIOn knowledge basePRION:CVE-2014-0621HistoryJan 08, 2014 - 3:30 p.m.
Cross site request forgery (csrf)
2014-01-0815:30:00
PRIOn knowledge base
www.prio-n.com
6
Multiple cross-site request forgery (CSRF) vulnerabilities in Technicolor (formerly Thomson) TC7200 STD6.01.12 allow remote attackers to hijack the authentication of administrators for requests that (1) perform a factory reset via a request to goform/system/factory, (2) disable advanced options via a request to goform/advanced/options, (3) remove ip-filters via the IpFilterAddressDelete1 parameter to goform/advanced/ip-filters, or (4) remove firewall settings via the cbFirewall parameter to goform/advanced/firewall.
| CPE | Name | Operator | Version |
|---|---|---|---|
| tc7200_firmware | eq | 6.1.12-std |
References
Related
cve
cve
CVE-2014-0621
2014-01-08 15:30:02
cvelist
cvelist
CVE-2014-0621
2014-01-08 15:00:00
packetstorm
packetstorm
Technicolor TC7200 Cross Site Request Forgery
2014-01-02 00:00:00
exploitpack
exploitpack
Technicolor TC7200 - Multiple Cross-Site Request Forgery Vulnerabilities
2014-01-03 00:00:00
nvd
nvd
CVE-2014-0621
2014-01-08 15:30:02
seebug
seebug
Technicolor TC7200 - Multiple CSRF Vulnerabilities
2014-07-01 00:00:00
Technicolor TC7200多个跨站请求伪造漏洞
2014-01-07 00:00:00
exploitdb
exploitdb
Technicolor TC7200 - Multiple Cross-Site Request Forgery Vulnerabilities
2014-01-03 00:00:00
zdt
zdt
Technicolor TC7200 - Multiple XSS / CSRF Vulnerabilities
2014-01-03 00:00:00