Netgear RP614 Wireless Router Cross-Site Request Forgery Vulnerability
BID:35214
Info
Netgear RP614 Wireless Router Cross-Site Request Forgery Vulnerability
| Bugtraq ID: | 35214 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 04 2009 12:00AM |
| Updated: | Jun 04 2009 06:59PM |
| Credit: | Russ McRee |
| Vulnerable: |
NetGear RP614 1.0.5_04.23 |
| Not Vulnerable: | |
Discussion
Netgear RP614 Wireless Router Cross-Site Request Forgery Vulnerability
The Netgear RP614 wireless router is prone to a cross-site request-forgery vulnerability.
Successful exploits can run privileged commands on the affected device.
Netgear RP614 running firmware 1.0.5_04.23 is vulnerable.
The Netgear RP614 wireless router is prone to a cross-site request-forgery vulnerability.
Successful exploits can run privileged commands on the affected device.
Netgear RP614 running firmware 1.0.5_04.23 is vulnerable.
Exploit / POC
Netgear RP614 Wireless Router Cross-Site Request Forgery Vulnerability
To exploit this issue, an attacker must entice an unsuspecting victim into following a malicious URI.
To exploit this issue, an attacker must entice an unsuspecting victim into following a malicious URI.
Solution / Fix
Netgear RP614 Wireless Router Cross-Site Request Forgery Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Netgear RP614 Wireless Router Cross-Site Request Forgery Vulnerability
References:
References:
- HIO-2009-0521 Netgear RP614v4 CSRF & XSS (HolisticInfoSec)
- Netgear Homepage (NetGear)