CVE-2021-32403

Published: May 17, 2021Modified: Nov 21, 2024

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF) due to lack of security mechanisms for token protection and unsafe inputs and modules.

Affected (1)

Products: Intelbras: Rf 301k Firmware

Intelbras

1 product

Rf 301k Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intelbras Rf 301k Firmware	Version 1.1.2

Running on/with	Platform Versions
Intelbras Rf 301k	All versions

Related CWEs

CWE-352

Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (4)

http://packetstormsecurity.com/files/163023/Intelbras-Router-RF-301K-Cross-Site-Request-Forgery.html

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

https://www.youtube.com/watch?v=1Ed-2xBFG3M

Source: cve@mitre.org

ExploitThird Party Advisory

http://packetstormsecurity.com/files/163023/Intelbras-Router-RF-301K-Cross-Site-Request-Forgery.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

https://www.youtube.com/watch?v=1Ed-2xBFG3M

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.