Gửi #312623: SMI WiFi Router V1.0.03 Cross Site Request Forgerythông tin

tiêu đềSMI WiFi Router V1.0.03 Cross Site Request Forgery
Mô tảDear Team, I would like to bring to your attention a critical vulnerability that has been discovered in the SMI WiFi router, specifically pertaining to Cross Site Request Forgery (CSRF). The model susceptible to this vulnerability is identified as SMI-EX-5414W. Upon investigation, it has been confirmed that through a Proof of Concept (PoC), I was able to successfully execute a forged request, thereby gaining unauthorized access to reboot the router. This poses a significant security risk to our network infrastructure and warrants immediate attention and remediation. Given the severity of this issue, I recommend that we promptly undertake measures to address this vulnerability, including but not limited to implementing security patches, updating firmware, or deploying additional security protocols to mitigate potential exploitation. I am available to provide further details and collaborate on resolving this matter to ensure the integrity and security of our network environment. Sincerely, Faiyaz Ahmad
Nguồn⚠️ https://drive.google.com/file/d/1ekMbzI-lv6M02HttjFoQHWG8nZOIwPbf/view?usp=sharing
Người dùng
 faiyazahmad (UID 60242)
Đệ trình08/04/2024 22:24 (cách đây 2 những năm)
Kiểm duyệt16/04/2024 12:42 (8 days later)
Trạng tháiđược chấp nhận
Mục VulDB260907 [SMI SMI-EX-5414W đến 1.0.03 Web Interface Giả mạo yêu cầu liên trang]
điểm20

Do you want to use VulDB in your project?

Use the official API to access entries easily!