CVE-2024-12271

Summary

CVE-2024-28143 is a vulnerability affecting the password change function at /cgi/admin.cgi. This issue allows an attacker to set a new password for a user without requiring the current or old password. This vulnerability can be exploited through a CSRF attack, enabling an unauthorized user to forcefully change account credentials. The absence of a password verification step during the password modification process poses a significant risk for account takeover attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.