CVE-2017-6896

Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from user privilege to admin privilege just by modifying the Base64-encoded session cookie value...

Privilege escalation

Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from user privilege to admin privilege just by modifying the Base64-encoded session cookie value...

CVE-2017-6896

Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from user privilege to admin privilege just by modifying the Base64-encoded session cookie value...

CVE-2017-6896

The CVE-2017-6896 entry concerns the DIGISOL DG-HR1400 wireless router. Affected component: the authentication/session handling for DG-HR1400 1.00.02. Root cause (as described): privilege escalation is achievable by modifying the Base64-encoded session cookie value, enabling an attacker to rise f...

CVE-2017-6896: Reliance on Cookies without Validation and Integrity Checking

Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from user privilege to admin privilege just by modifying the Base64-encoded session cookie value...

PT-2017-17401

Name of the Vulnerable Software and Affected Versions DIGISOL DG-HR1400 version 1.00.02 Description A privilege escalation issue allows an attacker to gain admin privileges by modifying the Base64-encoded session cookie value, thus escalating from user privilege to admin privilege. Recommendation...

DigiSol DG-HR1400 Wireless Router Cross-Site Request Forgery Vulnerability

The DigiSol DG-HR1400 Wireless Router is a wireless broadband home router. A cross-site request forgery vulnerability exists in the access portal of the DigiSol DG-HR1400 Wireless Router. This allows a remote attacker to construct a malicious URI, trick the user into resolving it, and perform...

DIGISOL DG-HR1400 Cross Site Request Forgery

html Digisol Router CSRF Exploit - Indrajith A.N history.pushState'', '', '/' input type="submit...

CVE-2017-6127

Multiple cross-site request forgery CSRF vulnerabilities in the access portal on the DIGISOL DG-HR1400 Wireless Router with firmware 1.00.02 allow remote attackers to hijack the authentication of administrators for requests that 1 change the SSID, 2 change the Wi-Fi password, or 3 possibly have...

CVE-2017-6127

Multiple cross-site request forgery CSRF vulnerabilities in the access portal on the DIGISOL DG-HR1400 Wireless Router with firmware 1.00.02 allow remote attackers to hijack the authentication of administrators for requests that 1 change the SSID, 2 change the Wi-Fi password, or 3 possibly have...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the access portal on the DIGISOL DG-HR1400 Wireless Router with firmware 1.00.02 allow remote attackers to hijack the authentication of administrators for requests that 1 change the SSID, 2 change the Wi-Fi password, or 3 possibly have...

CVE-2017-6127

The CVE-2017-6127 issue affects the DigiSol DG-HR1400 Wireless Router (firmware 1.00.02) and is a CSRF vulnerability in the access portal. Exposed via crafted requests to form2WlanBasicSetup.cgi, it allows an attacker to hijack administrator authentication to perform actions such as changing the ...

CVE-2017-6127

Multiple cross-site request forgery CSRF vulnerabilities in the access portal on the DIGISOL DG-HR1400 Wireless Router with firmware 1.00.02 allow remote attackers to hijack the authentication of administrators for requests that 1 change the SSID, 2 change the Wi-Fi password, or 3 possibly have...

DIGISOL DG-HR1400 Wireless Router - Cross-Site Request Forgery

DIGISOL DG-HR1400 Wireless Router - Cross-Site Request Forgery Digisol Router CSRF Exploit - Indrajith A.N history.pushState'', '', '/' input type="hidden" name="basicrates" value...

DIGISOL DG-HR1400 Wireless Router - Cross-Site Request Forgery

Digisol Router CSRF Exploit - Indrajith A.N history.pushState'', '', '/' input type="hidden" name="operrates" value="409...

CVE-2017-6127: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the access portal on the DIGISOL DG-HR1400 Wireless Router with firmware 1.00.02 allow remote attackers to hijack the authentication of administrators for requests that 1 change the SSID, 2 change the Wi-Fi password, or 3 possibly have...

PT-2017-16900

Name of the Vulnerable Software and Affected Versions DIGISOL DG-HR1400 Wireless Router version 1.00.02 Description The issue affects the access portal on the DIGISOL DG-HR1400 Wireless Router, where multiple cross-site request forgery CSRF vulnerabilities exist. These vulnerabilities allow remot...