Cross site request forgery (csrf)

2018-01-1217:29:00

PRIOn knowledge base

www.prio-n.com

9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.2%

JSON

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services via CSRF can result in an unauthorized change of username or password of the administrator of the portal.

CPENameOperatorVersion
lm53q1_firmwareeq519r5c1s38-vh

CPE	Name	Operator	Version
	lm53q1_firmware	eq	519r5c1s38-vh

References

seclists.org/fulldisclosure/2018/Jan/28

www.exploit-db.com/exploits/43460/