EUVD-2019-16982

Malware in sbrugna...

CVE-2019-7440: Cross-Site Request Forgery (CSRF)

JioFi 4G M2S 1.0.2 devices have CSRF via the SSID name and Security Key field under Edit Wi-Fi Settings aka a SetWiFiSetting request to cgi-bin/qcmapwebcgi...

PT-2019-18613

Name of the Vulnerable Software and Affected Versions JioFi 4G M2S version 1.0.2 Description The issue concerns a CSRF vulnerability that can be exploited via the SSID name and Security Key field under Edit Wi-Fi Settings. This is achieved through a SetWiFi Setting request to the "cgi-bin/qcmap w...