CVE-2020-23590

CVE-2020-23590 affects Optilink OP-XT71000N hardware v2.2 with firmware OP_V3.3.1-191028. A CSRF vulnerability allows an unauthenticated remote attacker to change the WLAN SSID password via the page endpoint wlwpa.asp . The issue is rated CVSS v3.1 base score 6.5 (Medium) with impact on integrity...

CVE-2020-23589

A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to cause a Denial of Service by Rebooting the router through " /mgmdevreboot.asp."...

CVE-2020-23585

CVE-2020-23585 affects OPTILINK OP-XT71000N (Hardware Version V2.2; Firmware OP_V3.3.1-191028). The root cause is insufficient CSRF protections in mgm_config_file.asp, enabling a crafted CSRF form to send malicious XML to /boaform/admin/formMgmConfigUpload. Impact: attacker can gain full privileg...

CVE-2020-23589

The CVE-2020-23589 affects OPTILINK OP-XT71000N hardware (HW V2.2, FW OP_V3.3.1-191028). The vulnerability is a CSRF flaw that allows an unauthenticated, remote attacker to reboot the router via the path /mgm_dev_reboot.asp, causing a Denial of Service. No explicit exploit details, affected versi...

CVE-2020-23586

A vulnerability found in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to Add Network Traffic Control Type Rule...

PT-2022-8676 · Optilink · Optilink Op-Xt71000N

Name of the Vulnerable Software and Affected Versions: OPTILINK OP-XT71000N version 2.2 Description: The issue is related to Remote Code Execution. It occurs when an attacker sends arbitrary code to the "/diag ping admin.asp" API endpoint, specifically to the "PingTest" interface, leading to...

PT-2022-8681 · Optilink · Optilink Op-Xt71000N

Name of the Vulnerable Software and Affected Versions: OPTILINK OP-XT71000N Hardware Version: V2.2, Firmware Version: OP V3.3.1-191028 Description: A vulnerability allows an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to enable or disable ports and to chan...

CVE-2020-23589

A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to cause a Denial of Service by Rebooting the router through " /mgmdevreboot.asp."...

CVE-2020-23591

A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028 allows an attacker to upload arbitrary files through " /mgmdevupgrade.asp " which can "delete every file for Denial of Service using 'rm -rf .' in the code, reverse connection using '.asp' webshell,...

CVE-2020-23583

CVE-2020-23583 affects OPTILINK OP-XT71000N v2.2. A remote code execution vulnerability exists when an attacker sends arbitrary code to the PingTest interface via /diag_ping_admin.asp, leading to full system compromise. Remediation guidance in related documents suggests disabling access to the /d...

CVE-2020-23590

A vulnerability in Optilink OP-XT71000N Hardware version: V2.2 , Firmware Version: OPV3.3.1-191028 allows an unauthenticated remote attacker to conduct a cross-site request forgery CSRF attack to change the Password for "WLAN SSID" through "wlwpa.asp"...

CVE-2020-23593

CVE-2020-23593 affects OPTILINK OP-XT71000N hardware (V2.2) with firmware OP_V3.3.1-191028. A CSRF vulnerability allows an unauthenticated, remote attacker to enable syslog mode via the page /mgm_log_cfg.asp. When triggered, the device begins logging events in either Remote or Both mode and trans...

CVE-2020-23588

CVE-2020-23588 affects OPTILINK OP-XT71000N hardware (Version V2.2) with firmware OP_V3.3.1-191028. An unauthenticated, remote attacker can perform a CSRF attack via /rmtacc.asp to enable/disable ports and to change port numbers. Impact: unauthorized configuration changes. The Red Hat advisory an...

CVE-2020-23591

The CVE-2020-23591 issue affects OPTILINK OP-XT71000N hardware (Version V2.2; Firmware OP_V3.3.1-191028). A vulnerability exists in the /mgm_dev_upgrade.asp endpoint that enables an attacker to upload arbitrary files. This can lead to Denial of Service via commands like rm -rf . , a potential rev...

CVE-2020-23593

A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2, Firmware Version: OPV3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross site request forgery CSRF attack to enable syslog mode through ' /mgmlogcfg.asp.' The system starts to log events, 'Remote' mode or 'Both...

CVE-2020-23582

A vulnerability in the "/admin/wlmultipleap.asp" of optilink OP-XT71000N version: V2.2 could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to create Multiple WLAN BSSID...

CVE-2020-23582

A vulnerability in the "/admin/wlmultipleap.asp" of optilink OP-XT71000N version: V2.2 could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to create Multiple WLAN BSSID...

Cross site request forgery (csrf)

A vulnerability in the "/admin/wlmultipleap.asp" of optilink OP-XT71000N version: V2.2 could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to create Multiple WLAN BSSID...

CVE-2020-23582

A vulnerability in the "/admin/wlmultipleap.asp" of optilink OP-XT71000N version: V2.2 could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to create Multiple WLAN BSSID...

Optilink Network OP-XT71000N 跨站请求伪造漏洞

Optilink Network OP-XT71000N is a wireless router from Optilink Network India. A security vulnerability exists in Optilink Network OP-XT71000N version V2.2. An attacker could exploit this vulnerability to perform a cross-site request forgery attack...