Binatone DT 850W Wireless Router Multiple Cross Site Request Forgery Vulnerabilities

Bugtraq ID:	67541
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 21 2014 12:00AM
Updated:	May 21 2014 12:00AM
Credit:	Samandeep Singh
Vulnerable:
Not Vulnerable:

Binatone DT 850W Wireless Router Multiple Cross Site Request Forgery Vulnerabilities

Binatone DT 850W wireless router is prone to multiple cross-site request-forgery vulnerabilities.

Exploiting these issues may allow a remote attacker to perform certain administrative actions and compromise the affected device.

Binatone DT 850W running firmware versions T6W-A1.005 and prior are vulnerable; other versions may also be affected.

Binatone DT 850W Wireless Router Multiple Cross Site Request Forgery Vulnerabilities

To exploit these issues an attacker must entice a user into visiting a malicious site.

Binatone DT 850W Wireless Router Multiple Cross Site Request Forgery Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Binatone DT 850W Wireless Router Multiple Cross Site Request Forgery Vulnerabilities

References: