CVE-2008-6823
04.06.2009, 16:30
Multiple cross-site request forgery (CSRF) vulnerabilities in the management interface on the A-LINK WL54AP3 and WL54AP2 access points before firmware 1.4.2-eng1 allow remote attackers to hijack the authentication of administrators for requests that (1) modify the network configuration via certain parameters to goform/formWanTcpipSetup or (2) modify credentials via certain parameters to goform/formPasswordSetup.
| Vendor | Product | Version |
|---|---|---|
| a-link | wl54ap2 | 𝑥 ≤ 1.4.1 |
| a-link | wl54ap2 | 1.2.0 |
| a-link | wl54ap2 | 1.2.1 |
| a-link | wl54ap2 | 1.2.2 |
| a-link | wl54ap2 | 1.2.3 |
| a-link | wl54ap2 | 1.2.4 |
| a-link | wl54ap2 | 1.2.5 |
| a-link | wl54ap2 | 1.2.6 |
| a-link | wl54ap2 | 1.2.7 |
| a-link | wl54ap2 | 1.2.8 |
| a-link | wl54ap2 | 1.2.9 |
| a-link | wl54ap2 | 1.4.0 |
| a-link | wl54ap3 | 𝑥 ≤ 1.4.1 |
| a-link | wl54ap3 | 1.2.0 |
| a-link | wl54ap3 | 1.2.1 |
| a-link | wl54ap3 | 1.2.2 |
| a-link | wl54ap3 | 1.2.3 |
| a-link | wl54ap3 | 1.2.4 |
| a-link | wl54ap3 | 1.2.5 |
| a-link | wl54ap3 | 1.2.6 |
| a-link | wl54ap3 | 1.2.7 |
| a-link | wl54ap3 | 1.2.8 |
| a-link | wl54ap3 | 1.2.9 |
| a-link | wl54ap3 | 1.4.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References