CVE-2014-10019

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2015-01-13 · updated 2026-06-17
Weakness: CWE-352

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allow remote attackers to hijack the authentication of administrators for requests that (1) change the SSID or (2) change the password via a crafted request.

Affected products

Teracom T2-B-Gawv1.4U10Y-Bi: all versions

References

http://www.exploit-db.com/exploits/32943
https://exchange.xforce.ibmcloud.com/vulnerabilities/92715
http://www.exploit-db.com/exploits/32943
https://exchange.xforce.ibmcloud.com/vulnerabilities/92715

Get alerted when CVE-2014-10019 or the next vulnerability affects your stack