The issue concerns multiple cross-site request forgery (CSRF) vulnerabilities in the web-based management utility of the affected routers. These vulnerabilities allow remote attackers to hijack the authentication of administrators for requests, including initializing settings or rebooting the device.