Lucene search
PRIOn knowledge basePRION:CVE-2019-14526HistoryAug 14, 2019 - 9:15 p.m.
Design/Logic Flaw
2019-08-1421:15:00
PRIOn knowledge base
www.prio-n.com
4
An issue was discovered on NETGEAR Nighthawk M1 (MR1100) devices before 12.06.03. The web-interface Cross-Site Request Forgery token is stored in a dynamically generated JavaScript file, and therefore can be embedded in third party pages, and re-used against the Nighthawk web interface. This entirely bypasses the intended security benefits of the use of a CSRF-protection token.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mr1100_firmware | lt | 12.06.03 |
Related
cve
cve
CVE-2019-14526
2019-08-14 21:15:13
nvd
nvd
CVE-2019-14526
2019-08-14 21:15:13
cvelist
cvelist
CVE-2019-14526
2019-08-14 20:50:12
pentestpartners
pentestpartners
Reverse Engineering 4G Hotspots for fun, bugs and net financial loss
2019-08-10 09:05:45