CVEvulnerability

CVE-2008-6823

6.8 MEDIUM Published 2009-06-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-06-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-352

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the management interface on the A-LINK WL54AP3 and WL54AP2 access points before firmware 1.4.2-eng1 allow remote attackers to hijack the authentication of administrators for requests that (1) modify the network configuration via certain parameters to goform/formWanTcpipSetup or (2) modify credentials via certain parameters to goform/formPasswordSetup.

Affected configurations

• a-link wl54ap2 (<= 1.4.1) • a-link wl54ap2 1.2.0 • a-link wl54ap2 1.2.1 • a-link wl54ap2 1.2.2 • a-link wl54ap2 1.2.3 • a-link wl54ap2 1.2.4 • a-link wl54ap2 1.2.5 • a-link wl54ap2 1.2.6 • a-link wl54ap2 1.2.7 • a-link wl54ap2 1.2.8 • a-link wl54ap2 1.2.9 • a-link wl54ap2 1.4.0 • a-link wl54ap3 (<= 1.4.1) • a-link wl54ap3 1.2.0 • a-link wl54ap3 1.2.1 • a-link wl54ap3 1.2.2 • a-link wl54ap3 1.2.3 • a-link wl54ap3 1.2.4 • a-link wl54ap3 1.2.5 • a-link wl54ap3 1.2.6 • a-link wl54ap3 1.2.7 • a-link wl54ap3 1.2.8 • a-link wl54ap3 1.2.9 • a-link wl54ap3 1.4.0

Related

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References