Fastweb FASTGate 0.00.47 – Cross-Site Request Forgery - 体验盒子

作者： Raffaele Sabato

日期： 2018-05-10

类别：

webapps

平台：

hardware

来源：https://www.exploit-db.com/exploits/44606/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

# Exploit Title: Fastweb FASTgate 0.00.47 CSRF

# Date: 09-05-2018

# Exploit Authors: Raffaele Sabato

# Contact: https://twitter.com/syrion89

# Vendor: Fastweb

# Product Web Page: http://www.fastweb.it/adsl-fibra-ottica/dettagli/modem-fastweb-fastgate/

# Version: 0.00.47

# CVE: CVE-2018-6023

I DESCRIPTION

========================================================================

An issue was discovered in Fastweb FASTgate 0.00.47 device. A Cross-site request forgery (CSRF) vulnerability allows remote attackers to hijack the authentication of users for requests that modify the configuration. This vulnerability may lead to Gues Wi-Fi activating, Wi-Fi password changing, etc.

The vulnerability was disclosed to Fastweb on 19 January 2018.

Fastweb independently patched customer devices with non-vulneable version .67 from December 2017 thru March 2018.

II PROOF OF CONCEPT

========================================================================

## Activate Gues Wi-Fi:

<html>

<body>

</form>

</body>

</html>

III REFERENCES

========================================================================

http://www.fastweb.it/myfastpage/assistenza/guide/FASTGate/