PT-2021-19192 · Multilaser · Multilaser Router Ac1200

Rodolfomarianocy Researchs · Published 2021-04-14 · Updated 2024-03-03 · CVE-2021-31152

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Multilaser Router AC1200 version V02.03.01.45 pt

Description The issue concerns a cross-site request forgery (CSRF) vulnerability, which allows an attacker to perform unauthorized actions. These actions include enabling remote access, changing passwords, and other operations through misconfigured requests, entries, and headers.

Recommendations For Multilaser Router AC1200 version V02.03.01.45 pt, consider disabling remote access and changing default passwords as a temporary workaround until a patch is available. Restrict access to the router's configuration interface to minimize the risk of exploitation. Avoid using the router for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2021-31152

Affected Products

Multilaser Router Ac1200

References · 7

• 🔥 http://packetstormsecurity.com/files/162258/Multilaser-Router-RE018-AC1200-Cross-Site-Request-Forgery.html · Exploit
• 🔥 https://exploit-db.com/exploits/49775 · Exploit
• 🔥 https://youtube.com/watch?v=zN3DVrcu6Eg · Exploit
• https://osv.dev/vulnerability/CVE-2021-31152 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-31152 · Security Note
• https://t.me/cvenotify/72872 · Telegram Post
• http://seclists.org/fulldisclosure/2024/Mar/1 · Note