PT-2019-7657 · Neet · Neet Airstream Nas

Luke Turvey · Published 2019-08-07 · Updated 2021-06-24 · CVE-2016-10861

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Neet AirStream NAS version 1.1

Description The issue allows for CSRF attacks, which can lead to changes in the AP name and password by modifying the settings binary.

Recommendations For Neet AirStream NAS version 1.1, consider disabling the settings binary modification functionality as a temporary workaround until a patch is available. Restrict access to the settings configuration to minimize the risk of exploitation.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2016-10861

Affected Products

Neet Airstream Nas

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-10861 · Security Note
• https://osv.dev/vulnerability/CVE-2016-10861 · Vendor Advisory
• https://pentestpartners.com/security-blog/a-neet-csrf-to-reverse-shell-in-wi-fi-music-streamer · Note