Harris Stratex StarMAX 2100 WIMAX Subscriber Station – Running Configuration Cross-Site Request Forgery - 体验盒子

作者： kalyanakumar

日期： 2010-07-07

类别：

webapps

平台：

hardware

来源：https://www.exploit-db.com/exploits/14264/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

I found CSRF vulnerability in Harris Stratex WIMAX 2100 subscriber

station.Using this code i am able to view the current configuration of the

subscriber station without authentication from both LAN & WAN

# Software Link:http://securityvulns.com/Wdocument736.html

# Version: 3.0.4.1.7.C

# Tested on: Any os

# CVE : No

Product :StarMAX 2100 WIMAX subscriber station

Affected Application Version: 3.0.4.1.7.C

Vendor submission:07-04-2009

Vendor Response:No

Vulnerability:Able to view the running configuration without authentication

from both LAN & WAN

<html>

<body>

</form>

</body>

</html>

Thanks

Kalyan

Security researcher