Cross site request forgery (csrf)

🗓️ 04 Dec 2023 23:15:00Reported by PRIOn knowledge baseType

CSRF vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via crafted GET request to /man_password.htm

Reporter	Title	Published	Views	Family All 84
ATTACKERKB	CVE-2023-24046	4 Dec 202323:15	–	attackerkb
ATTACKERKB	CVE-2023-24047	4 Dec 202323:15	–	attackerkb
ATTACKERKB	CVE-2023-24052	4 Dec 202323:15	–	attackerkb
ATTACKERKB	CVE-2023-24051	4 Dec 202323:15	–	attackerkb
ATTACKERKB	CVE-2023-24048	4 Dec 202323:15	–	attackerkb
ATTACKERKB	CVE-2023-24050	4 Dec 202323:15	–	attackerkb
BDU FSTEC	The vulnerability of the ping diagnostic function of the microprogrammed routing software Connectize G6 AC2100 allows a hacker to execute arbitrary commands.	25 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of the Connectize G6 AC2100 router’s software allows a hacker to disclose protected information.	25 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software of the Connectize G6 AC2100 router allows a hacker to gain administrator privileges.	25 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Connectize G6 AC2100 router’s microprogramming software lies in its overly restrictive mechanism for blocking user account data, which allows attackers to execute brute-force attacks.	25 Oct 202300:00	–	bdu_fstec

Source	Link
research	www.research.nccgroup.com/2023/10/19/technical-advisory-multiple-vulnerabilities-in-connectize-g6-ac2100-dual-band-gigabit-wifi-router-cve-2023-24046-cve-2023-24047-cve-2023-24048-cve-2023-24049-cve-2023-24050-cve-2023-24051-cve/

08 Dec 2023 14:57Current

7.6High risk

Vulners AI Score7.6

EPSS0.00726