ID

VAR-201102-0397


TITLE

Linksys WAG120N Wireless Router Cross-Site Request Forgery Vulnerability

Trust: 0.9

sources: CNVD: CNVD-2011-0799 // BID: 46571

DESCRIPTION

The Linksys WAG120N Wireless Router is a wireless router. The Linksys WAG120N Wireless Router has a cross-site request forgery vulnerability that allows an attacker to construct a malicious link, entice a user to click, and change the user's password. Successful exploits may allow attackers to run privileged commands on the affected device, change configuration, cause denial-of-service conditions, or inject arbitrary script code. Other attacks are also possible

Trust: 0.81

sources: CNVD: CNVD-2011-0799 // BID: 46571

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2011-0799

AFFECTED PRODUCTS

vendor:linksysmodel:wireless-n home adsl2+ modem router wag120nscope: - version: -

Trust: 0.6

vendor:linksysmodel:wireless-n home adsl2+ modem router wag120nscope:eqversion:0

Trust: 0.3

sources: CNVD: CNVD-2011-0799 // BID: 46571

THREAT TYPE

network

Trust: 0.3

sources: BID: 46571

TYPE

Design Error

Trust: 0.3

sources: BID: 46571

PATCH

title:Linksys WAG120N Wireless Router Cross-Site Request Forgery Vulnerability Patchurl:https://www.cnvd.org.cn/patchinfo/show/3105

Trust: 0.6

sources: CNVD: CNVD-2011-0799

EXTERNAL IDS

db:BIDid:46571

Trust: 0.9

db:CNVDid:CNVD-2011-0799

Trust: 0.6

sources: CNVD: CNVD-2011-0799 // BID: 46571

REFERENCES

url:http://comments.gmane.org/gmane.comp.security.oss.general/4149https

Trust: 0.6

url:http://www.linksys.com/

Trust: 0.3

url:http://www.linksysbycisco.com/eu/en/support/wag120n

Trust: 0.3

url:/archive/1/516689

Trust: 0.3

sources: CNVD: CNVD-2011-0799 // BID: 46571

CREDITS

Khashayar Fereidani

Trust: 0.3

sources: BID: 46571

SOURCES

db:CNVDid:CNVD-2011-0799
db:BIDid:46571

LAST UPDATE DATE

2022-05-17T02:09:59.869000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2011-0799date:2011-02-28T00:00:00
db:BIDid:46571date:2011-02-25T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2011-0799date:2011-02-28T00:00:00
db:BIDid:46571date:2011-02-25T00:00:00