Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp1 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary commands via the ping_ip parameter; (2) change the administrative credentials via the http_username and http_passwd parameters; (3) enable remote administration via the remote_management parameter; or (4) configure port forwarding via certain from, to, ip, and pro parameters.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DD-WRT 'apply.cgi'多个跨站请求伪造漏洞
Vulnerability Description
DD-WRT 24 sp1以及之前的版本中的apply.cgi存在多个跨站请求伪造漏洞。远程攻击者可以劫持管理员身份认证对以下的请求：(1)借助ping_ip参数执行任意指令；(2)借助http_username和http_passwd 参数更改管理信任凭证；(3)借助remote_management参数激活远程管理；或(4)借助from，to，ip，和pro参数配置端口内部捷传。
CVSS Information
N/A
Vulnerability Type
N/A