CVE-2021-32402

Published: May 17, 2021Modified: Nov 21, 2024

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF) due to lack of validation and insecure configurations in inputs and modules.

Affected (1)

Products: Intelbras: Rf 301k Firmware

Intelbras

1 product

Rf 301k Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intelbras Rf 301k Firmware	Version 1.1.2

Running on/with	Platform Versions
Intelbras Rf 301k	All versions

Related CWEs

CWE-352

Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (2)

https://www.youtube.com/watch?v=X2cU9MBN2Ys

Source: cve@mitre.org

ExploitThird Party Advisory

https://www.youtube.com/watch?v=X2cU9MBN2Ys

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.