PT-2023-2021 · NetGear · Netgear Nighthawk Wifi6 Router
CVE-2023-1205
·
Publicado
2023-03-06
·
Atualizado
2025-02-28
CVSS v2.0
9.0
Alta
| Vetor | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
NETGEAR Nighthawk WiFi 6 Router versions prior to V1.0.10.94
Description
The issue is related to a cross-site request forgery (CSRF) vulnerability due to improperly implemented CSRF protections on all endpoints. This could allow a remote attacker to perform a CSRF attack.
Recommendations
For versions prior to V1.0.10.94, update to version V1.0.10.94 or later to resolve the issue. As a temporary workaround, consider restricting access to all endpoints to minimize the risk of exploitation.
Correção
CSRF
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Netgear Nighthawk Wifi6 Router