CVE-2008-7165

Cross-site request forgery in cp06_wifi_m_nocifr.cgi in the administrator panel in TELECOM ITALIA Alice Gate2 Plus Wi-Fi allows remote attackers to hijack the authentication of administrators for requests that disable Wi-Fi encryption via certain values for the wlChannel and wlRadioEnable parameters.

Link	Resource
http://osvdb.org/40739
http://www.securityfocus.com/bid/27374	Exploit
http://secunia.com/advisories/28618	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/39831
http://www.securityfocus.com/archive/1/486733/100/200/threaded

Configuration 1

cpe:2.3:h:alice:gate2_plus_wi-fi:*:*:*:*:*:*:*:*

---

Published : 2009-09-04 10:30

Updated : 2018-10-11 08:58

---

NVD link : CVE-2008-7165

Mitre link : CVE-2008-7165

Alice

Gate2 Plus Wi-fi

CWE-352