CSRF Vulnerability in ZTE ZXDSL Broadband Router
CVE-2012-4746
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2012-4746?
A cross-site request forgery (CSRF) vulnerability exists in the accessaccount.cgi file of ZTE ZXDSL 831IIV7.5.0a_Z29_OV. This flaw enables remote adversaries to hijack administrative authentication. Exploitation of this vulnerability allows attackers to modify the administrator password by sending unauthorized requests containing the sysPassword parameter, potentially compromising the security of the device’s management interface. Proper safeguards should be implemented to mitigate this risk.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.