CVE-2021-25327

The CVE-2021-25327 entry concerns Skyworth RN510 (Firmware V.3.1.0.4). A CSRF vulnerability exists in /cgi-bin/net-routeadd.asp and /cgi-bin/sec-urlfilter.asp due to missing CSRF protection, with the description noting potential XSRF tied to XSS-prone pages. Connected sources corroborate the affe...

CVE-2021-25326

CVE-2021-25326 affects Skyworth Digital Technology RN510 V.3.1.0.4. An incorrect access control in /cgi-bin/test_version.asp can disclose SSID and Web UI passwords when Wi‑Fi is connected and an unauthenticated user visits a URL. Documents consistently identify the affected device and version, wi...