CVE-2012-1922: Multiple cross-site request forgery (CSRF) vulnerabilities in Sitecom WLM-2501 allow remote attackers to hi...

Security readout for executives and security teams

CVE-2012-1922 is a set of CSRF flaws reported in Sitecom WLM-2501 administration functions. If an administrator is already authenticated, a remote attacker could trick the browser into sending setting-changing requests affecting filtering, port forwarding, wireless access control, WPS, URL/domain blocking, and ACL settings. Exposure is most likely where Sitecom WLM-2501 devices are still deployed and administrators use the web management interface. Risk depends on authenticated administrator sessions and whether an attacker can lure that administrator to malicious content. Exact affected firmware versions are not provided. Treat this as a targeted legacy-device exposure issue, not a broad emergency. Prioritize inventory and replacement or isolation if WLM-2501 devices are still present, because the flaw can change network security settings through an authenticated administrator browser. Mitigation focus: Inventory for Sitecom WLM-2501 devices in use.; Check Sitecom or operator guidance for firmware updates or replacement advice.; Restrict access to the router administration interface to trusted management networks..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.