VAR-201509-0224
Vulnerability from variot - Updated: 2025-04-12 23:14Cross-site request forgery (CSRF) vulnerability in form2WlanSetup.cgi on Philippine Long Distance Telephone (PLDT) SpeedSurf 504AN devices with firmware GAN9.8U26-4-TX-R6B018-PH.EN and Kasda KW58293 devices allows remote attackers to hijack the authentication of administrators for requests that perform setup operations, as demonstrated by modifying network settings. The Phillipine Long Distance Telephone (PLDT) company provides internet access in the Phillippines. The SpeedSurf 504AN and Kasda KW58293 modems distributed by PLDT contain multiple vulnerabilities. The BaudTec ADSL2+ Router may also be affected. The PLDT SpeedSurf 504AN and Kasda KW58293 form2WlanSetup.cgi pages fail to perform authentication correctly, allowing remote attackers to build malicious URIs, entice users to resolve, and perform malicious actions in the target user context. This may aid in other attacks. The former is a product of the Philippine PLDT company. The latter is a product of China Hongcheng (Kasda) Digital Technology Co., Ltd
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201509-0224",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "speedsurf 504an",
"scope": "eq",
"trust": 1.6,
"vendor": "philippine long distance telephone",
"version": "gan9.8u26-4-tx-r6b018-hp.en"
},
{
"model": "kasda kw58293",
"scope": "eq",
"trust": 1.6,
"vendor": "philippine long distance telephone",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "philippine long distance telephone",
"version": null
},
{
"model": "kw58293",
"scope": "eq",
"trust": 0.8,
"vendor": "kasda",
"version": "none"
},
{
"model": "kw58293",
"scope": "eq",
"trust": 0.8,
"vendor": "kasda",
"version": "firmware"
},
{
"model": "speedsurf 504an",
"scope": null,
"trust": 0.8,
"vendor": "philippine long distance telephone pldt",
"version": null
},
{
"model": "speedsurf 504an",
"scope": "eq",
"trust": 0.8,
"vendor": "philippine long distance telephone pldt",
"version": "gan9.8u26-4-tx-r6b018-ph.en"
},
{
"model": "speedsurf 504an gan9.8u26-4-tx-r6b018-ph.en",
"scope": null,
"trust": 0.6,
"vendor": "philippine long distance telephone",
"version": null
},
{
"model": "kasda kw58293",
"scope": null,
"trust": 0.6,
"vendor": "philippine long distance telephone",
"version": null
},
{
"model": "speedsurf 504an gan9.8u26-4-tx-r6b01",
"scope": null,
"trust": 0.3,
"vendor": "philippine long distance telephone",
"version": null
},
{
"model": "kasda kw58293",
"scope": "eq",
"trust": 0.3,
"vendor": "philippine long distance telephone",
"version": "0"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#525276"
},
{
"db": "CNVD",
"id": "CNVD-2015-06101"
},
{
"db": "BID",
"id": "76527"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-004730"
},
{
"db": "CNNVD",
"id": "CNNVD-201509-214"
},
{
"db": "NVD",
"id": "CVE-2015-5991"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:misc:kasda_kw58293",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:philippine_long_distance_telephone:pldt_speedsurf_504an",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:philippine_long_distance_telephone:pldt_speedsurf_504an_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2015-004730"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Eskie Cirrus James Maquilang",
"sources": [
{
"db": "BID",
"id": "76527"
}
],
"trust": 0.3
},
"cve": "CVE-2015-5991",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "CVE-2015-5991",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "CNVD-2015-06101",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "VHN-83952",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2015-5991",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2015-5991",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2015-06101",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201509-214",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-83952",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-06101"
},
{
"db": "VULHUB",
"id": "VHN-83952"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-004730"
},
{
"db": "CNNVD",
"id": "CNNVD-201509-214"
},
{
"db": "NVD",
"id": "CVE-2015-5991"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cross-site request forgery (CSRF) vulnerability in form2WlanSetup.cgi on Philippine Long Distance Telephone (PLDT) SpeedSurf 504AN devices with firmware GAN9.8U26-4-TX-R6B018-PH.EN and Kasda KW58293 devices allows remote attackers to hijack the authentication of administrators for requests that perform setup operations, as demonstrated by modifying network settings. The Phillipine Long Distance Telephone (PLDT) company provides internet access in the Phillippines. The SpeedSurf 504AN and Kasda KW58293 modems distributed by PLDT contain multiple vulnerabilities. The BaudTec ADSL2+ Router may also be affected. The PLDT SpeedSurf 504AN and Kasda KW58293 form2WlanSetup.cgi pages fail to perform authentication correctly, allowing remote attackers to build malicious URIs, entice users to resolve, and perform malicious actions in the target user context. This may aid in other attacks. The former is a product of the Philippine PLDT company. The latter is a product of China Hongcheng (Kasda) Digital Technology Co., Ltd",
"sources": [
{
"db": "NVD",
"id": "CVE-2015-5991"
},
{
"db": "CERT/CC",
"id": "VU#525276"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-004730"
},
{
"db": "CNVD",
"id": "CNVD-2015-06101"
},
{
"db": "BID",
"id": "76527"
},
{
"db": "VULHUB",
"id": "VHN-83952"
}
],
"trust": 3.24
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#525276",
"trust": 4.2
},
{
"db": "NVD",
"id": "CVE-2015-5991",
"trust": 3.4
},
{
"db": "JVN",
"id": "JVNVU98946427",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2015-004730",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201509-214",
"trust": 0.7
},
{
"db": "CNVD",
"id": "CNVD-2015-06101",
"trust": 0.6
},
{
"db": "BID",
"id": "76527",
"trust": 0.4
},
{
"db": "VULHUB",
"id": "VHN-83952",
"trust": 0.1
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#525276"
},
{
"db": "CNVD",
"id": "CNVD-2015-06101"
},
{
"db": "VULHUB",
"id": "VHN-83952"
},
{
"db": "BID",
"id": "76527"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-004730"
},
{
"db": "CNNVD",
"id": "CNNVD-201509-214"
},
{
"db": "NVD",
"id": "CVE-2015-5991"
}
]
},
"id": "VAR-201509-0224",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-06101"
},
{
"db": "VULHUB",
"id": "VHN-83952"
}
],
"trust": 1.30416665
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-06101"
}
]
},
"last_update_date": "2025-04-12T23:14:17.989000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "KW58293",
"trust": 0.8,
"url": "http://www.kasda.cn/product_info.asp?id=232"
},
{
"title": "PLDT - Philippine Long Distance Telephone Company",
"trust": 0.8,
"url": "http://www.pldt.com/"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2015-004730"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-352",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-83952"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-004730"
},
{
"db": "NVD",
"id": "CVE-2015-5991"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.4,
"url": "http://www.kb.cert.org/vuls/id/525276"
},
{
"trust": 0.8,
"url": "about vulnerability notes"
},
{
"trust": 0.8,
"url": "contact us about this vulnerability"
},
{
"trust": 0.8,
"url": "provide a vendor statement"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-5991"
},
{
"trust": 0.8,
"url": "http://jvn.jp/vu/jvnvu98946427/index.html"
},
{
"trust": 0.8,
"url": "https://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-5991"
},
{
"trust": 0.3,
"url": "http://www.pldt.com/"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#525276"
},
{
"db": "CNVD",
"id": "CNVD-2015-06101"
},
{
"db": "VULHUB",
"id": "VHN-83952"
},
{
"db": "BID",
"id": "76527"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-004730"
},
{
"db": "CNNVD",
"id": "CNNVD-201509-214"
},
{
"db": "NVD",
"id": "CVE-2015-5991"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#525276"
},
{
"db": "CNVD",
"id": "CNVD-2015-06101"
},
{
"db": "VULHUB",
"id": "VHN-83952"
},
{
"db": "BID",
"id": "76527"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-004730"
},
{
"db": "CNNVD",
"id": "CNNVD-201509-214"
},
{
"db": "NVD",
"id": "CVE-2015-5991"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2015-08-31T00:00:00",
"db": "CERT/CC",
"id": "VU#525276"
},
{
"date": "2015-09-22T00:00:00",
"db": "CNVD",
"id": "CNVD-2015-06101"
},
{
"date": "2015-09-21T00:00:00",
"db": "VULHUB",
"id": "VHN-83952"
},
{
"date": "2015-08-31T00:00:00",
"db": "BID",
"id": "76527"
},
{
"date": "2015-09-18T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2015-004730"
},
{
"date": "2015-08-31T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201509-214"
},
{
"date": "2015-09-21T10:59:06.553000",
"db": "NVD",
"id": "CVE-2015-5991"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2016-04-17T00:00:00",
"db": "CERT/CC",
"id": "VU#525276"
},
{
"date": "2015-09-22T00:00:00",
"db": "CNVD",
"id": "CNVD-2015-06101"
},
{
"date": "2015-09-21T00:00:00",
"db": "VULHUB",
"id": "VHN-83952"
},
{
"date": "2015-08-31T00:00:00",
"db": "BID",
"id": "76527"
},
{
"date": "2015-09-30T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2015-004730"
},
{
"date": "2015-12-15T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201509-214"
},
{
"date": "2025-04-12T10:46:40.837000",
"db": "NVD",
"id": "CVE-2015-5991"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201509-214"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Phillipine Long Distance Telephone SpeedSurf 504AN and Kasda KW58293 Cross-Site Request Forgery Vulnerability",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-06101"
},
{
"db": "CNNVD",
"id": "CNNVD-201509-214"
}
],
"trust": 1.2
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "cross-site request forgery",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201509-214"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…