CVE-2012-1258

cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer before 9.0.1...

6.5 MediumPublic exploit

cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer before 9.0.1.19899 does not validate user permissions, which allow remote attackers to add user accounts with administrator privileges via the newuser, pwd, and selectedUserGroup parameters.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: High
Availability: None

Exploit likelihood

3.33%Up 2.2 points since Feb 4, 2022

What each source reports

NVD Score used 6.5

Record: CVE-2012-1258
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0: 4.0 MediumAV:N/AC:L/Au:S/C:N/I:P/A:N
Weakness: CWE-287
Updated: 2026-11-02

CVE List No score

Record: CVE-2012-1258
Updated: 2026-11-02

EUVDEUVD-2012-1284 No score

Record: EUVD-2012-1284
Updated: 2026-11-03

GitHub AdvisoriesGHSA-mpqx-63fh-p5mj No score

cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer before 9.0.1...

Record: GHSA-mpqx-63fh-p5mj
Updated: 2026-11-02

Affected products

plixer scrutinizer netflow \& sflow analyzer

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Scrutinizer NetFlow & sFlow Analyzer - Multiple Vulnerabilities	2012-04-19

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-1258 is a medium vulnerability (CVSS 6.5) in Plixer Scrutinizer Netflow \& Sflow Analyzer, published January 9, 2020. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.33%, the 88th percentile. No source names a fixed version.