Huzaifa Hussain

A vulnerability allows an unauthenticated, remote attacker to conduct a cross site request forgery (CSRF) attack to enable syslog mode through "/mgm log cfg.asp". The system starts to log events, 'Remote' mode or 'Both' mode on "Syslog -- Configuration page" logs events and sends to remote syslog server IP and Port.

A vulnerability allows an attacker to upload arbitrary files through "/mgm dev upgrade.asp" which can delete every file for Denial of Service (using `rm -rf *.*` in the code), establish a reverse connection (using `.asp` webshell), or create a backdoor.

A vulnerability allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to reset the ONU to factory default through the API endpoint "/mgm dev reset.asp". Resetting to default leads to escalation of privileges by logging in with default credentials.

The issue is related to Remote Code Execution. It occurs when an attacker sends arbitrary code to the "/diag ping admin.asp" API endpoint, specifically to the "PingTest" interface, leading to command execution. This allows an attacker to compromise the full system.

The issue occurs due to unauthenticated remote code execution when an attacker passes arbitrary commands with an IP-ADDRESS using " | " to execute commands on "/diag tracert admin.asp" in the `PingTest` parameter. This leads to command execution.

A remote attacker can conduct a cross-site request forgery (CSRF) attack due to insufficient CSRF protections for the "mgm config file.asp" file. This allows an attacker to create a crafted "csrf form" that sends malicious XML data to the "/boaform/admin/formMgmConfigUpload" API endpoint. The exploit enables the attacker to gain full privileges and fully compromise the router and network.

A vulnerability allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to Add Network Traffic Control Type Rule. This issue enables an attacker to manipulate network traffic control settings without proper authentication.

A vulnerability allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack, enabling a man-in-the-middle attack by adding new routes in RoutingConfiguration on the "/routing.asp" API endpoint. This issue can be exploited to intercept and manipulate traffic.

A vulnerability allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to enable or disable ports and to change port numbers through the "/rmtacc.asp" API endpoint.

A vulnerability allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack, causing a Denial of Service by rebooting the router through the "/mgm dev reboot.asp" API endpoint.

A vulnerability allows an unauthenticated remote attacker to conduct a cross-site request forgery (CSRF) attack to change the Password for "WLAN SSID" through the "wlwpa.asp" page.

A vulnerability in the "/admin/wlmultipleap.asp" API endpoint of optilink OP-XT71000N could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to create Multiple WLAN BSSID.

The issue allows remote attackers to bypass the CAPTCHA protection mechanism on the login page, enabling them to conduct brute-force attacks.