| 제목 | SMI WiFi Router V1.0.03 Cross Site Request Forgery |
|---|
| 설명 | Dear Team,
I would like to bring to your attention a critical vulnerability that has been discovered in the SMI WiFi router, specifically pertaining to Cross Site Request Forgery (CSRF). The model susceptible to this vulnerability is identified as SMI-EX-5414W.
Upon investigation, it has been confirmed that through a Proof of Concept (PoC), I was able to successfully execute a forged request, thereby gaining unauthorized access to reboot the router. This poses a significant security risk to our network infrastructure and warrants immediate attention and remediation.
Given the severity of this issue, I recommend that we promptly undertake measures to address this vulnerability, including but not limited to implementing security patches, updating firmware, or deploying additional security protocols to mitigate potential exploitation.
I am available to provide further details and collaborate on resolving this matter to ensure the integrity and security of our network environment.
Sincerely,
Faiyaz Ahmad |
|---|
| 원천 | ⚠️ https://drive.google.com/file/d/1ekMbzI-lv6M02HttjFoQHWG8nZOIwPbf/view?usp=sharing |
|---|
| 사용자 | faiyazahmad (UID 60242) |
|---|
| 제출 | 2024. 04. 08. PM 10:24 (2 연령 ago) |
|---|
| 모더레이션 | 2024. 04. 16. PM 12:42 (8 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 260907 [SMI SMI-EX-5414W 까지 1.0.03 Web Interface 교차 사이트 요청 위조] |
|---|
| 포인트들 | 20 |
|---|