CSRF in Thomson Twg87ouir

CVE-2014-4716

Cross-site request forgery (CSRF) vulnerability in Thomson TWG87OUIR allows remote attackers to hijack the authentication of unspecified victims for requests that change passwords via the Password and PasswordReEnter parameters to goform/RgSecurity.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.023 (81.3th percentile) — read the EPSS interpretation.

Affected products

Thomson Twg87ouir
N/a — versions n/a

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

References

cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (Exploit, exploit, x_refsource_EXPLOIT-DB)
cve@mitre.org (Exploit, x_refsource_MISC)