Cross-Site Request Forgery Vulnerabilities in Actiontec MI424WR-GEN3I Router by Verizon
CVE-2013-0126
Currently unrated
What is CVE-2013-0126?
The Actiontec MI424WR-GEN3I router by Verizon is susceptible to multiple cross-site request forgery (CSRF) vulnerabilities in its index.cgi file. Attackers can exploit these vulnerabilities to hijack the authentication of administrators, facilitating unauthorized actions such as adding administrative accounts and activating remote management features. By manipulating requests through crafted URLs, an attacker can compromise the integrity of the router's administration interface, posing significant risks to network security.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.