high8.8Public exploit code
CVE-2021-31152
Multilaser Router AC1200 V02.03.01.45_pt contains a cross-site request forgery (CSRF) vulnerability.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Multilaser Router RE018 AC1200 - Cross-Site Request Forgery (Enable Remote Access)2021-04-21 · webapps · hardware
Impact
Multilaser Router AC1200 V02.03.01.45_pt contains a cross-site request forgery (CSRF) vulnerability. An attacker can enable remote access, change passwords, and perform other actions through misconfigured requests, entries, and headers.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Multilaser | Ac1200 Re018 Firmware | Version v02.03.01.45_pt |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/162258/Multilaser-Router-RE018-AC1200-Cross-Site-Request-Forgery.html
- http://seclists.org/fulldisclosure/2024/Mar/1
- https://www.youtube.com/watch?v=zN3DVrcu6Eg
- http://packetstormsecurity.com/files/162258/Multilaser-Router-RE018-AC1200-Cross-Site-Request-Forgery.html
- http://seclists.org/fulldisclosure/2024/Mar/1
- https://www.youtube.com/watch?v=zN3DVrcu6Eg