TP-Link TL-WDR4300 version 3.13.31 has multiple CSRF vulnerabilities.
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Link | Tags |
---|---|
https://www.ise.io/casestudies/exploiting-soho-routers/ | third party advisory exploit |
https://www.ise.io/soho_service_hacks/ | third party advisory |
https://www.ise.io/wp-content/uploads/2017/06/soho_defcon21.pdf | third party advisory |
https://www.securityfocus.com/bid/62884/info | vdb entry third party advisory |
https://vuldb.com/?id.10495 | third party advisory |