Incorrect Access Control in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the same network to perform any HTTP request to an unauthenticated page to force the server to generate a SESSION_ID, and using this SESSION_ID an attacker can then perform authenticated requests.
References
Link | Resource |
---|---|
http://cf-wr6110n.com | Broken Link |
http://comfast.com | Broken Link |
http://sn0ox.com/research/2023/02/05/CVE-COMFAST-CF-WR610N.html | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2023-02-13T00:00:00
Updated: 2023-02-13T00:00:00
Reserved: 2022-11-21T00:00:00
Link: CVE-2022-45724
JSON object: View
NVD Information
Status : Analyzed
Published: 2023-02-13T14:15:10.237
Modified: 2023-08-08T14:22:24.967
Link: CVE-2022-45724
JSON object: View
Redhat Information
No data.
CWE