$ cve CVE-2012-1922 JSON

CVE-2012-1922 EXPLOIT

6.8

MEDIUM · CVSS 2.0 · EPSS 1.4% (pctl 72)

Patch early

A public exploit exists.

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Sitecom WLM-2501 allow remote attackers to hijack the authentication of administrators for requests that modify settings for (1) Mac Filtering via admin/formFilter, (2) IP/Port Filtering via formFilter, (3) Port Forwarding via formPortFw, (4) Wireless Access Control via admin/formWlAc, (5) Wi-Fi Protected Setup via formWsc, (6) URL Blocking Filter via formURL, (7) Domain Blocking Filter via formDOMAINBLK, and (8) IP Address ACL Filter via admin/formACL in goform/, different vectors than CVE-2012-1921.

Scoring

CVSS	6.8 (MEDIUM, v2.0)
Vector	AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS	1.39% — more likely to be exploited than 72% of all CVEs
Weakness	CWE-352
On CISA KEV	no
Public exploit	yes
Published	2013-01-24
Last modified	2026-06-16

Affected (1)

Vendor	Product
sitecom	wlm-2501

Public exploits

Source	Title	Date
exploit-db	Sitecom WLM-2501 - Multiple Cross-Site Request Forgery Vulnerabilities	2012-03-23
exploit-db	Sitecom WLM-2501 - Cross-Site Request Forgery	2012-03-14

References

→ the Explorer · watch your stack · NVD