Vulnerability CVE-2018-12456

Vulnerability CVE-2018-12456

Published: 2018-10-10

Description:

Intelbras NPLUG 1.0.0.14 wireless repeater devices have no CSRF token protection in the web interface, allowing attackers to perform actions such as changing the wireless SSID, rebooting the device, editing access control lists, or activating remote access.

See advisories in our WLB2 database:

	Topic	Author	Date
Med.	NPLUG Wireless Repeater 1.0.0.14 CSRF / XSS / Authentication Bypass	Patrick Costa	11.10.2018

Type:

CWE-352

(Cross-Site Request Forgery (CSRF))

CVSS2 => (AV:N/AC:M/Au:N/C:P/I:P/A:P)

CVSS Base Score	Impact Subscore	Exploitability Subscore
6.8/10	6.4/10	8.6/10

Exploit range	Attack complexity	Authentication
Remote	Medium	No required
Confidentiality impact	Integrity impact	Availability impact
Partial	Partial	Partial

Affected software
Intelbras -> Nplug firmware

References:

http://seclists.org/fulldisclosure/2018/Oct/18

Copyright 2024, cxsecurity.com