EUVD-2017-3260

Malware in sbrugna...

Design/Logic Flaw

Techroutes TR 1803-3G Wireless Cellular Router/Modem 2.4.25 devices do not possess any protection against a CSRF vulnerability, as demonstrated by a goform/BasicSettings request to disable port filtering...

CVE-2017-11648

Techroutes TR 1803-3G Wireless Cellular Router/Modem 2.4.25 devices do not possess any protection against a CSRF vulnerability, as demonstrated by a goform/BasicSettings request to disable port filtering...

CVE-2017-11648

The CVE-2017-11648 issue affects Techroutes TR 1803-3G Wireless Cellular Router/Modem (firmware 2.4.25). The vulnerability is a Cross-Site Request Forgery (CSRF) flaw in which the device has no CSRF protections, enabling an attacker to trigger sensitive actions (e.g., goform/BasicSettings to disa...