A cross-site request forgery web vulnerability has been discovered on Netis WF2419 V2.2.36123 devices. A remote attacker is able to delete Address Reservation List settings.
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
| Link | Tags |
|---|---|
| https://packetstormsecurity.com/files/146117/netiswf2419-xsrf.txt | exploit vdb entry third party advisory |
| https://www.exploit-db.com/exploits/43919/ | exploit vdb entry third party advisory |
| https://0day.today/exploit/29659 | third party advisory exploit |