CVE-2008-6823
- State
- Published
- Severity
- Not scored
- Published
- Jun 4, 2009
- Updated
- Aug 7, 2024
- Reserved
- Jun 4, 2009
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the management interface on the A-LINK WL54AP3 and WL54AP2 access points before firmware 1.4.2-eng1 allow remote attackers to hijack the authentication of administrators for requests that (1) modify the network configuration via certain parameters to goform/formWanTcpipSetup or (2) modify credentials via certain parameters to goform/formPasswordSetup.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- wl54ap3-wl54ap2-domain-name-xss(46255)vdb-entry
- wl54ap3-wl54ap2-interface-csrf(46256)vdb-entry
- 49466vdb-entry
- 32008vdb-entry
- 49465vdb-entry
- 20081031 A-Link WL54AP3 and WL54AP2 CSRF+XSS vulnerabilitymailing-list
- 6899exploit
- 32421third-party-advisory
- http://www.louhinetworks.fi/advisory/alink_081028.txt
- http://www.a-link.com/WL54AP3.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.