Cross site request forgery (csrf)

2020-11-2418:15:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.8%

JSON

Fastweb FASTGate GPON FGA2130FWB devices through 2020-05-26 allow CSRF via the router administration web panel, leading to an attacker’s ability to perform administrative actions such as modifying the configuration.

CPENameOperatorVersion
fastgate_gpon_fga2130fwb_firmwareeq<= 2020526

CPE	Name	Operator	Version
	fastgate_gpon_fga2130fwb_firmware	eq	<= 2020526

References

lucadidomenico.medium.com/fastgate-gpon-cross-site-request-forgery-cve-2020-13620-e279f3fbaee4

members.backbox.org/fastgate-gpon-cross-site-request-forgery/