CyberRota Analysis
AI-GeneratedThe WNC T-Mobile 5G Box IDU router is vulnerable to a cross-site request forgery (CSRF) due to inadequate validation of the csrf_token_value parameter, enabling remote attackers to execute unauthorized actions by deceiving authenticated users into visiting malicious sites. This high-severity vulnerability (CVSS 8.4) poses significant risks to users, particularly those managing sensitive network configurations. Users of the affected router should prioritize updating to firmware version 1.1.0.651412 to mitigate this risk.
Original NVD Description
WNC T-Mobile 5G Box IDU router contains a cross-site request forgery (CSRF) vulnerability in the portal.cgi component. The anti-CSRF mechanism fails to validate the csrf_token_value parameter, accepting any arbitrary value as valid. This allows a remote attacker to perform unauthorized actions on the device by tricking an authenticated user into visiting a malicious website.This issue has been fixed in firmware version 1.1.0.651412