Zyxel NBG-418N v2 v1.00(AAXM.4)C0 devices allow login.cgi CSRF.
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Link | Tags |
---|---|
https://twitter.com/god3err/status/1088067902832631809 | third party advisory |
https://alicangonullu.biz/konu/3 | third party advisory exploit |
https://www.exploit-db.com/exploits/46240/ | third party advisory vdb entry exploit |