CVE-2012-5992 Cross-site request forgery in n/a
Remote attackers can hijack administrator sessions to create admin accounts or inject XSS via CSRF on Cisco WLC devices.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2012-5992?
CVE-2012-5992 is a medium-severity vulnerability in Cisco Wireless Lan Controller Software, published on 19 Dec 2012. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.
Official description
Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allow remote attackers to hijack the authentication of administrators for requests that (1) add administrative accounts via screens/aaa/mgmtuser_create.html or (2) insert XSS sequences via the headline parameter to screens/base/web_auth_custom.html, aka Bug ID CSCud50283.
Weakness: CWE-352
Which versions are affected by CVE-2012-5992?
It affects 9 products.
Products include Cisco 2000 Wireless Lan Controller, Cisco 2100 Wireless Lan Controller, Cisco 2500 Wireless Lan Controller, Cisco 4100 Wireless Lan Controller, Cisco 4400 Wireless Lan Controller, Cisco 5500 Wireless Lan Controller and 3 more.
How do I fix CVE-2012-5992?
No fix has been published for CVE-2012-5992 yet. Limit exposure of the affected software until one is available.
Is CVE-2012-5992 being exploited?
There is no known exploitation of CVE-2012-5992 in the wild and no public exploit code.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Cisco Wireless Lan Controller Software
Sources
Also known as GHSA-44pq-x8pr-ff7r.