Cross site request forgery (csrf)

2018-10-1021:29:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.1%

JSON

Intelbras NPLUG 1.0.0.14 wireless repeater devices have no CSRF token protection in the web interface, allowing attackers to perform actions such as changing the wireless SSID, rebooting the device, editing access control lists, or activating remote access.

CPENameOperatorVersion
nplug_firmwareeq1.0.0.14

CPE	Name	Operator	Version
	nplug_firmware	eq	1.0.0.14

References

seclists.org/fulldisclosure/2018/Oct/18