CVE-2015-4624

Published: Mar 31, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.6 / Impact: 5.9

Source: NVD

Description

Hak5 WiFi Pineapple 2.0 through 2.3 uses predictable CSRF tokens.

Affected (4)

Products: Hak5: Wi Fi Pineapple Firmware

1 product

Wi Fi Pineapple Firmware

Configuration A

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hak5 Wi Fi Pineapple Firmware	Version 2.0
Hak5 Wi Fi Pineapple Firmware	Version 2.1
Hak5 Wi Fi Pineapple Firmware	Version 2.2
Hak5 Wi Fi Pineapple Firmware	Version 2.3

Running on/with	Platform Versions
Hak5 Wi Fi Pineapple	All versions

Related CWEs

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (8)

http://packetstormsecurity.com/files/133052/WiFi-Pineapple-Predictable-CSRF-Token.html

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/139212/Hak5-WiFi-Pineapple-Preconfiguration-Command-Injection-2.html

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/536184/100/500/threaded

Source: cve@mitre.org

https://www.exploit-db.com/exploits/40609/

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/133052/WiFi-Pineapple-Predictable-CSRF-Token.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/139212/Hak5-WiFi-Pineapple-Preconfiguration-Command-Injection-2.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/536184/100/500/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/40609/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

Timeline

No history available yet.