CVE-2021-25327: Improper Neutralization of Input During Web Page Generation

Skyworth Digital Technology RN510 V.3.1.0.4 contains a cross-site request forgery CSRF vulnerability in /cgi-bin/net-routeadd.asp and /cgi-bin/sec-urlfilter.asp. Missing CSRF protection in devices can lead to XSRF, as the above pages are vulnerable to cross-site scripting XSS...

PT-2021-16522

Name of the Vulnerable Software and Affected Versions: Skyworth Digital Technology RN510 version 3.1.0.4 Description: The issue is related to a cross-site request forgery CSRF vulnerability in the /cgi-bin/net-routeadd.asp and /cgi-bin/sec-urlfilter.asp API endpoints. This vulnerability can lead ...