CVE-2019-6967

AirTies Air5341 1.0.0.12 devices allow cgi-bin/login CSRF...

CVE-2019-6967

AirTies Air5341 1.0.0.12 devices allow cgi-bin/login CSRF...

Cross site request forgery (csrf)

AirTies Air5341 1.0.0.12 devices allow cgi-bin/login CSRF...

CVE-2019-6967

AirTies Air5341 1.0.0.12 devices allow cgi-bin/login CSRF...

CVE-2019-6967

AirTies Air5341 Modem firmware 1.0.0.12 is affected by CVE-2019-6967: a Cross-Site Request Forgery vulnerability in cgi-bin/login. Public writeups and PoC exploit materials exist (Packet Storm, Exploit-DB, 0day.today), indicating practical CSRF exploitation against the device. The vulnerability i...

CVE-2019-6967: Cross-Site Request Forgery (CSRF)

AirTies Air5341 1.0.0.12 devices allow cgi-bin/login CSRF...

PT-2019-18386

Name of the Vulnerable Software and Affected Versions AirTies Air5341 version 1.0.0.12 Description The issue allows for a CSRF attack on the cgi-bin/login endpoint. Recommendations For AirTies Air5341 version 1.0.0.12, consider implementing CSRF protection measures, such as token-based validation...