CSRF in Hot Hotbox Router

CVE-2013-5039

Cross-site request forgery (CSRF) vulnerability in goform/wlanBasicSecurity on the HOT HOTBOX router with software 2.1.11 allows remote attackers to hijack the authentication of administrators for requests that change the WiFi Security field to Deactivated via the WifiSecurity parameter.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.021 (80.1th percentile) — read the EPSS interpretation.

Affected products

Hot Hotbox_router
Hot Hotbox_router_firmware — versions 2.1.11
N/a — versions n/a

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

References

cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (Exploit, x_refsource_MISC)