Broken Access Control and CSRF in Genexis Router

CVE-2020-25015

What is CVE-2020-25015?

The Genexis Platinum 4410 V2-1.28, a widely used router in home and office environments, suffers from a significant security flaw that enables an attacker to remotely alter the Wi-Fi password. This vulnerability arises from a combination of broken access control and CSRF weaknesses, permitting unauthorized users to manipulate router settings without proper authentication. As a result, attackers can easily disrupt connectivity and potentially gain access to sensitive information transmitted over the compromised network.

References