An issue was discovered on Intex N150 devices. The router firmware suffers from multiple CSRF injection point vulnerabilities including changing user passwords and router settings.
References
Link | Resource |
---|---|
http://securitywarrior9.blogspot.com/2018/06/cross-site-request-forgery-intex-router.html | Exploit Third Party Advisory |
https://www.exploit-db.com/exploits/44939/ | Exploit Not Applicable Third Party Advisory VDB Entry |
https://www.exploit-db.com/exploits/44933/ | Exploit Third Party Advisory |
http://securitywarrior9.blogspot.com/2018/06/cross-site-request-forgery-intex-router.html | Exploit Third Party Advisory |
https://www.exploit-db.com/exploits/44939/ | Exploit Not Applicable Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
AND |
|
History
21 Nov 2024, 03:45
Type | Values Removed | Values Added |
---|---|---|
References | () http://securitywarrior9.blogspot.com/2018/06/cross-site-request-forgery-intex-router.html - Exploit, Third Party Advisory | |
References | () https://www.exploit-db.com/exploits/44939/ - Exploit, Not Applicable, Third Party Advisory, VDB Entry |
Information
Published : 2018-07-02 16:29
Updated : 2024-11-21 03:45
NVD link : CVE-2018-12529
Mitre link : CVE-2018-12529
CVE.ORG link : CVE-2018-12529
JSON object : View
Products Affected
intex
- n150_firmware
- n150
CWE
CWE-352
Cross-Site Request Forgery (CSRF)