CVE-2012-1308

CVE-2012-1308 is a CSRF vulnerability in the D-Link DSL-2640B firmware (EU_4.00) affecting redpass.cgi, allowing remote attackers to hijack administrator authentication to change the administrator password via the sysPassword parameter. The issue is documented with CVSS v2 base score 6.8 (MEDIUM)...