CVE-2020-23585

CVE-2020-23585 affects OPTILINK OP-XT71000N (Hardware Version V2.2; Firmware OP_V3.3.1-191028). The root cause is insufficient CSRF protections in mgm_config_file.asp, enabling a crafted CSRF form to send malicious XML to /boaform/admin/formMgmConfigUpload. Impact: attacker can gain full privileg...