6.8

CVE-2012-5992: cisco 2500_wireless_lan_controller Cross-Site Request Forgery (CSRF)

CVSS: 6.8v2.0MediumModified
Published 19-12-2012Last modified 16-09-2024
Open JSON

Vulnerability summary

CVE-2012-5992 is a medium (CVSS 6.8) Cross-Site Request Forgery (CSRF) vulnerability in cisco 2500_wireless_lan_controller. EPSS estimates a 1.78% chance of exploitation in the next 30 days, higher than 77.9% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk
38/100
0100
Medium · default modelHow is this calculated?
CVSS score
6.8/10
010
Medium · v2.0 (NVD)
EPSS score
1.78%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits2reference, exploit-database

Timeline

  1. 19-12-2012
    PublishedVulnerability first disclosed.
  2. 16-09-2024
    Last modifiedVulnerability information updated.

Description

Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allow remote attackers to hijack the authentication of administrators for requests that (1) add administrative accounts via screens/aaa/mgmtuser_create.html or (2) insert XSS sequences via the headline parameter to screens/base/web_auth_custom.html, aka Bug ID CSCud50283.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

1.78%

Chance of exploitation in the next 30 days

Percentile

78%

Versus all other CVEs

30-day change

0.00 pp

From 1.78% on 19-09-2026

19-09-202619-10-2026
EPSS score
1.78%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found
  • referenceUnverified

    Exploit Reference (infosec42.blogspot.dk)

    Maturity: unknown

  • exploit-databasedoshardwareUnverified

    Cisco Wireless Lan Controller 7.2.110.0 - Multiple Vulnerabilities

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Cisco5 products

1 vendor · 5 products

References

1 links