CVE-2012-1308

no score yetEPSS 2.4%

Cross-site request forgery (CSRF) vulnerability in redpass.cgi in D-Link DSL-2640B Firmware EU_4.00 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter.

EPSS: 2.4% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2012-10-08
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

dlink:dsl-2640b
dlink:dsl-2640b_firmware

References

http://www.exploit-db.com/exploits/18499
http://www.securityfocus.com/bid/52096
https://exchange.xforce.ibmcloud.com/vulnerabilities/73316
http://www.exploit-db.com/exploits/18499
http://www.securityfocus.com/bid/52096

Check your stack JSON