Description
Cross-site request forgery (CSRF) vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows remote attackers to hijack the authentication of logged in user to conduct unintended operations via unspecified vectors.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Corega | CG-WLR300NX | firmware Ver. 1.20 and earlier | — |
References
- JVN#23823838 third-party-advisory
- http://corega.jp/support/security/20161111_wlr300nx.htm
- 94248 vdb-entry