Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2018-25321

TP-Link TL-WR720N CSRF via Administrative Interfaces (firmware V1_130719)

Description

TP-Link TL-WR720N wireless router contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious web requests. Attackers can modify port forwarding rules via VirtualServerRpm.htm or change WiFi security settings via WlanSecurityRpm.htm by tricking authenticated users into visiting attacker-controlled pages.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tp-link TL-WR720NMbps Wireless N Router

  • V1_130719affected

References