CSRF Vulnerability in ChinaMobile PLC Wireless Router GPN2.4P21-C-CN Firmware W2001EN-00

CVE-2019-6282 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:P/A:P

ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have CSRF via the cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity URI, allowing an Attacker to change the Wireless Security Password.

Learn more about our Web App Pen Testing.