CVE-2018-6023: Cross-Site Request Forgery (CSRF)

Fastweb FASTgate 0.00.47 devices are vulnerable to CSRF, with impacts including Wi-Fi password changing, Guest Wi-Fi activating, etc...

PT-2018-17306

Name of the Vulnerable Software and Affected Versions Fastweb FASTgate version 0.00.47 Description The issue allows for CSRF attacks, which can lead to significant impacts such as changing Wi-Fi passwords and activating Guest Wi-Fi. Recommendations For Fastweb FASTgate version 0.00.47, update to ...

Fastweb FASTGate 0.00.47 Cross Site Request Forgery

Exploit Title: Fastweb FASTgate 0.00.47 CSRF Date: 09-05-2018 Exploit Authors: Raffaele Sabato Contact: https://twitter.com/syrion89 Vendor: Fastweb Product Web Page: http://www.fastweb.it/adsl-fibra-ottica/dettagli/modem-fastweb-fastgate/ Version: 0.00.47 CVE: CVE-2018-6023 I DESCRIPTION...

Fastweb FASTGate 0.00.47 - Cross-Site Request Forgery

Fastweb FASTGate 0.00.47 - Cross-Site Request Forgery Exploit Title: Fastweb FASTgate 0.00.47 CSRF Date: 09-05-2018 Exploit Authors: Raffaele Sabato Contact: https://twitter.com/syrion89 Vendor: Fastweb Product Web Page: http://www.fastweb.it/adsl-fibra-ottica/dettagli/modem-fastweb-fastgate/...

Fastweb FASTGate 0.00.47 - Cross-Site Request Forgery

Exploit Title: Fastweb FASTgate 0.00.47 CSRF Date: 09-05-2018 Exploit Authors: Raffaele Sabato Contact: https://twitter.com/syrion89 Vendor: Fastweb Product Web Page: http://www.fastweb.it/adsl-fibra-ottica/dettagli/modem-fastweb-fastgate/ Version: 0.00.47 CVE: CVE-2018-6023 I DESCRIPTION...

Fastweb FASTGate 0.00.47 - Cross-site Request Forgery

Exploit for hardware platform in category web applications Exploit Title: Fastweb FASTgate 0.00.47 CSRF Exploit Authors: Raffaele Sabato Contact: https://twitter.com/syrion89 Vendor: Fastweb Product Web Page: http://www.fastweb.it/adsl-fibra-ottica/dettagli/modem-fastweb-fastgate/ Version: 0.00.4...

shop.fastweb.it Open Redirect vulnerability

Vulnerable URL: http://shop.fastweb.it/shop.php?p=;https://www.openbugbounty.org"%20http-equiv="refresh"%20"%20=6342=pr Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...