CVE-2012-1922
Sitecom WLM-2501 - Cross-Site Request Forgery in Multiple Admin Forms
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-1922. PoCs published by Ivano Binetti.
AI-analyzed exploit summary This exploit demonstrates multiple CSRF vulnerabilities in the Sitecom WLM-2501 router's web interface, allowing an attacker to disable various security features (e.g., MAC filtering, IP/Port filtering, WPS) via crafted HTML forms that submit POST requests to the router's management interface.
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Sitecom WLM-2501 allow remote attackers to hijack the authentication of administrators for requests that modify settings for (1) Mac Filtering via admin/formFilter, (2) IP/Port Filtering via formFilter, (3) Port Forwarding via formPortFw, (4) Wireless Access Control via admin/formWlAc, (5) Wi-Fi Protected Setup via formWsc, (6) URL Blocking Filter via formURL, (7) Domain Blocking Filter via formDOMAINBLK, and (8) IP Address ACL Filter via admin/formACL in goform/, different vectors than CVE-2012-1921.
Exploits (2)
This exploit demonstrates multiple CSRF vulnerabilities in the Sitecom WLM-2501 router's web interface, allowing an attacker to disable various security features (e.g., MAC filtering, IP/Port filtering, WPS) via crafted HTML forms that submit POST requests to the router's management interface.
This is a CSRF exploit targeting Sitecom WLM-2501 routers, allowing an attacker to change the wireless passphrase by tricking an authenticated user into visiting a malicious webpage. The exploit submits a crafted form to the router's web interface without user interaction.