Description
Ubee EVW327 contains a cross-site request forgery vulnerability that allows attackers to enable remote access without user interaction. Attackers can craft a malicious webpage that automatically submits a form to change router remote access settings to port 8080 without the user's consent.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ubeeinteractive | Ubee EVW327 | EVW327 | — |
References
- ExploitDB-49920 exploit
- Ubee Interactive Official Homepage product
- VulnCheck Advisory: Ubee EVW327 - 'Enable Remote Access' Cross-Site Request Forgery (CSRF) third-party-advisory