CyberRota Analysis
AI-GeneratedThe iDirect iQ200 is vulnerable due to inadequate validation of CSRF tokens on state-changing API endpoints, specifically the /api/reboot endpoint, which can be exploited by remote attackers. This flaw allows an attacker to trigger a device reboot through a cross-site POST request, potentially leading to a denial-of-service condition and loss of satellite connectivity. Organizations using the iQ200 should prioritize addressing this vulnerability to protect against unauthorized device manipulation and service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The iDirect iQ200 does not validate CSRF tokens on state-changing API endpoints after authentication. The /api/reboot endpoint accepts POST requests authenticated solely by a session cookie that lacks the SameSite attribute. A remote attacker can host a malicious web page that, when visited by an authenticated administrator, automatically submits a cross-site POST request causing an immediate device reboot and satellite link loss. Repeated attacks can sustain a denial-of-service condition.