Cross site request forgery (csrf)

2019-08-0713:15:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

21.8%

Neet AirStream NAS1.1 devices allow CSRF attacks that cause the settings binary to change the AP name and password.

CPENameOperatorVersion
airstream_nas_firmwareeq1.1

CPE	Name	Operator	Version
	airstream_nas_firmware	eq	1.1

References

www.pentestpartners.com/security-blog/a-neet-csrf-to-reverse-shell-in-wi-fi-music-streamer/