CVE-2020-23592

Affected : OPTILINK OP-XT71000N, Hardware V2.2; Firmware OP_V3.3.1-191028. Vulnerability : Cross-site request forgery (CSRF) that can be exploited remotely without authentication via the endpoint /mgm_dev_reset.asp . Impact : Resetting the ONU to factory defaults enables privilege escalation by l...

CVE-2020-23584

Unauthenticated remote code execution in OPTILINK OP-XT71000N, Hardware Version: V2.2 occurs when the attacker passes arbitrary commands with IP-ADDRESS using " | " to execute commands on " /diagtracertadmin.asp " in the "PingTest" parameter that leads to command execution...

CVE-2020-23586

The CVE-2020-23586 vulnerability affects OPTILINK OP-XT71000N hardware (v2.2) with firmware OP_V3.3.1-191028 and enables an unauthenticated remote attacker to perform a CSRF attack that adds a Network Traffic Control Type Rule. Connected sources (CNNVD-202211-3359, Red Hat page mirrors, and CVE r...

Optilink Network OP-XT71000N 跨站请求伪造漏洞

The Optilink Network OP-XT71000N is a wireless router from Optilink Network India. A cross-site request forgery vulnerability exists in the Optilink Network OP-XT71000N version V2.2, which originates from a vulnerability that could allow an unauthenticated, remote attacker to change the password ...

CVE-2020-23587

A vulnerability found in the OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to men in the middle attack by adding New Routes in RoutingConfiguration on " /routing.asp "...

CVE-2020-23585

A remote attacker can conduct a cross-site request forgery CSRF attack on OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028. The vulnerability is due to insufficient CSRF protections for the "mgmconfigfile.asp" because of which attacker can create a crafted "csrf for...

CVE-2020-23590

A vulnerability in Optilink OP-XT71000N Hardware version: V2.2 , Firmware Version: OPV3.3.1-191028 allows an unauthenticated remote attacker to conduct a cross-site request forgery CSRF attack to change the Password for "WLAN SSID" through "wlwpa.asp"...

CVE-2020-23589

The CVE-2020-23589 affects OPTILINK OP-XT71000N hardware (HW V2.2, FW OP_V3.3.1-191028). The vulnerability is a CSRF flaw that allows an unauthenticated, remote attacker to reboot the router via the path /mgm_dev_reboot.asp, causing a Denial of Service. No explicit exploit details, affected versi...

CVE-2020-23583

CVE-2020-23583 affects OPTILINK OP-XT71000N v2.2. A remote code execution vulnerability exists when an attacker sends arbitrary code to the PingTest interface via /diag_ping_admin.asp, leading to full system compromise. Remediation guidance in related documents suggests disabling access to the /d...

CVE-2020-23590

A vulnerability in Optilink OP-XT71000N Hardware version: V2.2 , Firmware Version: OPV3.3.1-191028 allows an unauthenticated remote attacker to conduct a cross-site request forgery CSRF attack to change the Password for "WLAN SSID" through "wlwpa.asp"...

Optilink Network OP-XT71000N 跨站请求伪造漏洞

The Optilink Network OP-XT71000N is a wireless router from Optilink Network India. A cross-site request forgery vulnerability exists in the Optilink Network OP-XT71000N version V2.2, which originates from a vulnerability that could allow an unauthenticated, remote attacker to spoof cross-site...

PT-2022-8676 · Optilink · Optilink Op-Xt71000N

Name of the Vulnerable Software and Affected Versions: OPTILINK OP-XT71000N version 2.2 Description: The issue is related to Remote Code Execution. It occurs when an attacker sends arbitrary code to the "/diag ping admin.asp" API endpoint, specifically to the "PingTest" interface, leading to...

CVE-2020-23588

A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to "Enable or Disable Ports" and to "Change port number" through " /rmtacc.asp "...

CVE-2020-23584

Unauthenticated remote code execution in OPTILINK OP-XT71000N, Hardware Version: V2.2 occurs when the attacker passes arbitrary commands with IP-ADDRESS using " | " to execute commands on " /diagtracertadmin.asp " in the "PingTest" parameter that leads to command execution...

CVE-2020-23588

CVE-2020-23588 affects OPTILINK OP-XT71000N hardware (Version V2.2) with firmware OP_V3.3.1-191028. An unauthenticated, remote attacker can perform a CSRF attack via /rmtacc.asp to enable/disable ports and to change port numbers. Impact: unauthorized configuration changes. The Red Hat advisory an...

Optilink Network OP-XT71000N 跨站请求伪造漏洞

The Optilink Network OP-XT71000N is a wireless router from Optilink Network India. A cross-site request forgery vulnerability exists in the Optilink Network OP-XT71000N version V2.2, which originates from a vulnerability that could allow an unauthenticated, remote attacker to implement cross-site...

CVE-2020-23592

A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to Reset ONU to Factory Default through ' /mgmdevreset.asp.' Resetting to default leads to Escalation o...

CVE-2020-23585

A remote attacker can conduct a cross-site request forgery CSRF attack on OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028. The vulnerability is due to insufficient CSRF protections for the "mgmconfigfile.asp" because of which attacker can create a crafted "csrf for...

CVE-2020-23586

A vulnerability found in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to Add Network Traffic Control Type Rule...

Optilink Network OP-XT71000N 代码问题漏洞

The Optilink Network OP-XT71000N is a wireless router from Optilink Network India. A code issue vulnerability exists in Optilink Network OP-XT71000N version V2.2, which stems from a vulnerability that allows an attacker to cause a denial of service by uploading an arbitrary file via...