PT-2013-2113 · Actiontec · Actiontec Mi424Wr-Gen3I

Jacob Holcomb · Published 2013-03-21 · Updated 2013-10-07 · CVE-2013-0126

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Actiontec MI424WR-GEN3I router with firmware 40.19.36

Description The issue concerns multiple cross-site request forgery (CSRF) vulnerabilities in the index.cgi file of the affected router. These vulnerabilities allow remote attackers to hijack the authentication of administrators for specific requests. The requests in question include adding administrative accounts via the username and user level parameters, as well as enabling remote administration through the is telnet primary and is telnet secondary parameters.

Recommendations For the Actiontec MI424WR-GEN3I router with firmware 40.19.36, consider disabling remote administration until a patch is available to prevent exploitation of the CSRF vulnerabilities. Additionally, restrict access to the index.cgi file and its associated parameters (username, user level, is telnet primary, and is telnet secondary) to minimize the risk of unauthorized administrative account additions or changes to remote administration settings.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2013-0126

Affected Products

Actiontec Mi424Wr-Gen3I

References · 5

• 🔥 https://exploit-db.com/exploits/24860 · Exploit
• 🔥 http://exploit-db.com/exploits/24860 · Exploit
• 🔥 http://infosec42.blogspot.com/2013/03/verizon-fios-router-csrf-cve-2013-0126.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-0126 · Security Note
• http://kb.cert.org/vuls/id/278204 · Note