| 标题 | Tenda F6 (N300) Wireless Router Firmware V12.02.01.73 (Hardware V5.0) Cross-Site Request Forgery (CWE-352) |
|---|
| 描述 | The web management interface of the Tenda F6 (N300), firmware V12.02.01.73 (HW V5.0), does not implement anti-CSRF protection. State-changing actions are accepted as form POST requests with no anti-CSRF token and no SameSite restriction on the session cookie. By inducing an authenticated administrator to view a crafted web page, an attacker can silently trigger administrative actions, including factory restore (POST /goform/sysRestore with body "module1=sysOperate&action=restore"), device reboot, and administrator password change. Successful exploitation results in full device takeover and denial of service. The router's fixed default LAN address (192.168.0.1) makes a single exploit page effective against any affected device without reconnaissance. Confirmed on firmware V12.02.01.73 (HW V5.0); the latest firmware (V12.02.02.77) was not tested. |
|---|
| 来源 | ⚠️ https://github.com/0xWKZER/tenda-f6-vulnerabilities/blob/main/01-csrf.md |
|---|
| 用户 | WKZER (UID 100459) |
|---|
| 提交 | 2026-10-09 17時04分 (16 日前) |
|---|
| 管理 | 2026-10-23 16時57分 (14 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 425974 [Tenda F6 12.02.01.73 Web Management Interface 跨网站请求伪造] |
|---|
| 积分 | 20 |
|---|