Record summary

CVE-2012-4746 has a selected CVSS score of 6.8; EIP currently links 2 catalogued exploits.

Description

Cross-site request forgery (CSRF) vulnerability in accessaccount.cgi in ZTE ZXDSL 831IIV7.5.0a_Z29_OV allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
2

Proofs of concept

2

Catalogued exploits

ExploitDBZTE ZXDSL 831IIV7.5.0a_Z29_OV - Multiple VulnerabilitiesExploitDB exploitby mehdi boukazoulaNot analyzed1 file
ExploitDB

PoC details
ExploitDBZTE - Change Admin PasswordExploitDB exploitby Nuevo AsesinoNot analyzed1 file
ExploitDB

PoC details

References

2