CVE-2012-5319

Description

Cross-site request forgery (CSRF) vulnerability in setup/security.cgi in D-Link DCS-900, DCS-2000, and DCS-5300 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the rootpass parameter.

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• http://www.exploit-db.com/exploits/18509
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73387
• http://www.exploit-db.com/exploits/18509
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73387

CWEs

CWE-352