CVE-2018-12529

Description

An issue was discovered on Intex N150 devices. The router firmware suffers from multiple CSRF injection point vulnerabilities including changing user passwords and router settings.

Weakness classification

• CWE-352: Cross-Site Request Forgery (CSRF)

Primary references

• cve@mitre.org — Exploit, Third Party Advisory
• cve@mitre.org — Exploit, Not Applicable, Third Party Advisory, VDB Entry
• nvd@nist.gov — Exploit, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Not Applicable, Third Party Advisory, VDB Entry