CVE-2012-1921
Sitecom WLM-2501 - Cross-Site Request Forgery via pskValue Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-1921.
AI-analyzed exploit summary This is a functional CSRF exploit targeting Sitecom WLM-2501 routers, allowing an attacker to change the wireless passphrase via a crafted HTML form submission. The exploit leverages the lack of CSRF protection in the router's web interface.
Description
Cross-site request forgery (CSRF) vulnerability in goform/admin/formWlEncrypt in Sitecom WLM-2501 allows remote attackers to hijack the authentication of administrators for requests that change the router passphrase via the pskValue parameter.
Exploits (2)
This is a functional CSRF exploit targeting Sitecom WLM-2501 routers, allowing an attacker to change the wireless passphrase via a crafted HTML form submission. The exploit leverages the lack of CSRF protection in the router's web interface.
This exploit demonstrates multiple CSRF vulnerabilities in the Sitecom WLM-2501 router's web interface, allowing an attacker to disable various security features via crafted HTML forms. The PoC includes functional HTML/JavaScript snippets that automatically submit malicious requests to the router's management interface.