CSRF Vulnerability in Linksys EA4500 Firmware Version before 2.1.41.164606

CVE-2017-10677 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:P/A:P

Cross-Site Request Forgery (CSRF) exists on Linksys EA4500 devices with Firmware Version before 2.1.41.164606, as demonstrated by a request to apply.cgi to disable SIP.

Learn more about our Web Application Penetration Testing UK.