CVE-2024-2415 Command injection vulnerability in Movistar 4G router

Command injection vulnerability in Movistar 4G router affecting version ESWLD71-T1v2.0.201820. This vulnerability allows an authenticated user to execute commands inside the router by making a POST request to the URL '/cgi-bin/gui.cgi'...

CVE-2024-2416: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery vulnerability in Movistar's 4G router affecting version ESWLD71-T1v2.0.201820. This vulnerability allows an attacker to force an end user to execute unwanted actions in a web application in which they are currently authenticated...

Movistar 4G router cross-site request forgery vulnerability

Movistar 4G router is a series of routers from Movistar Spain. A cross-site request forgery vulnerability exists in the Movistar 4G router ESWLD71-T1v2.0.201820 firmware version, which originates from a vulnerability that allows an attacker to force a user to perform additional actions in a web...