CVE-2018-25321: TP-Link TL-WR720N All Versions CSRF via Administrative Interfaces
TP-Link TL-WR720N wireless router contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious web requests. Attackers can modify port forwarding rules via VirtualServerRpm.htm or change WiFi security settings via WlanSecurityRpm.htm by tricking authenticated users into visiting attacker-controlled pages.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-25321?
CVE-2018-25321 is classified as a medium severity cross-site request forgery vulnerability.
How do I fix CVE-2018-25321?
To fix CVE-2018-25321, update your TP-Link TL-WR720N router firmware to the latest version provided by TP-Link.
What type of vulnerability is CVE-2018-25321?
CVE-2018-25321 is a cross-site request forgery (CSRF) vulnerability affecting the TP-Link TL-WR720N router.
What actions can attackers perform due to CVE-2018-25321?
Attackers can perform unauthorized administrative actions, such as modifying port forwarding rules, due to CVE-2018-25321.
Are all versions of TP-Link TL-WR720N affected by CVE-2018-25321?
Yes, all versions of the TP-Link TL-WR720N are affected by CVE-2018-25321.