Skyworth Digital Technology RN510 V.3.1.0.4 contains a cross-site request forgery (CSRF) vulnerability in /cgi-bin/net-routeadd.asp and /cgi-bin/sec-urlfilter.asp. Missing CSRF protection in devices can lead to XSRF, as the above pages are vulnerable to cross-site scripting (XSS).
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/162454/Shenzhen-Skyworth-RN510-Cross-Site-Request-Forgery-Cross-Site-Scripting.html | Exploit Third Party Advisory VDB Entry |
| http://seclists.org/fulldisclosure/2021/May/6 | Exploit Mailing List Third Party Advisory |
| https://s3curityb3ast.github.io/KSA-Dev-012.md | Third Party Advisory |
| http://packetstormsecurity.com/files/162454/Shenzhen-Skyworth-RN510-Cross-Site-Request-Forgery-Cross-Site-Scripting.html | Exploit Third Party Advisory VDB Entry |
| http://seclists.org/fulldisclosure/2021/May/6 | Exploit Mailing List Third Party Advisory |
| https://s3curityb3ast.github.io/KSA-Dev-012.md | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 05:54
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://packetstormsecurity.com/files/162454/Shenzhen-Skyworth-RN510-Cross-Site-Request-Forgery-Cross-Site-Scripting.html - Exploit, Third Party Advisory, VDB Entry | |
| References | () http://seclists.org/fulldisclosure/2021/May/6 - Exploit, Mailing List, Third Party Advisory | |
| References | () https://s3curityb3ast.github.io/KSA-Dev-012.md - Third Party Advisory |
Information
Published : 2021-04-09 13:15
Updated : 2024-11-21 05:54
NVD link : CVE-2021-25327
Mitre link : CVE-2021-25327
CVE.ORG link : CVE-2021-25327
JSON object : View
Products Affected
skyworthdigital
- rn510_firmware
- rn510