CVE-2008-7165 Cross-site request forgery in cp06_wifi_m_nocifr.cgi in the administrator panel in TELECOM ITALIA Alice Gate2 Plus Wi-Fi allows remote attackers to hijack the authentication of administrators for requ...
MediumCVSS 6.8
EPSS 0.66%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery in cp06_wifi_m_nocifr.cgi in the administrator panel in TELECOM ITALIA Alice Gate2 Plus Wi-Fi allows remote attackers to hijack the authentication of administrators for requests that disable Wi-Fi encryption via certain values for the wlChannel and wlRadioEnable parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alice gate2 plus wi-fi | All versions | No fix listed |
References
- 40739 vdb-entry
- 28618 third-party-advisory vendor-advisory
- 20080121 Flaw in Alice gate2 pluswifi adsl modem mailing-list
- 27374 exploit vdb-entry
- alicegate2pluswifi-cp06wifimnocifr-csrf(39831) vdb-entry