CVE-2021-32402

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF) due to lack of validation and insecure configurations in inputs and modules.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-352

Affected software

No affected versions have been published.

Timeline

Published
May 17, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-324038.8Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF) due to lack of security mechanisms for token protCVE-2021-324157.8EXEMSI MSI Wrapper Versions prior to 10.0.50 and at least since version 6.0.91 will introduce a local privilege escalation vulnerability in CVE-2021-324195.3An issue in Schism Tracker v20200412 fixed in v.20200412 allows attacker to obtain sensitive information via the fmt_mtm_load_song function CVE-2021-32429.8DuxCMS v3.1.3 was discovered to contain a SQL injection vulnerability via the component s/tools/SendTpl/index?keyword=.CVE-2021-324207.5dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y.CVE-2021-324217.5dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox() function in dpic.y.CVE-2021-324227.5dpic 2021.01.01 has a Global buffer overflow in theyylex() function in main.c and reads out of the bound array.CVE-2021-324248.8In TrendNet TW100-S4W1CA 2.3.32, due to a lack of proper session controls, a threat actor could make unauthorized changes to an affected rouCVE-2021-324266.1In TrendNet TW100-S4W1CA 2.3.32, it is possible to inject arbitrary JavaScript into the router's web interface via the "echo" command.CVE-2021-324289.8SQL Injection vulnerability in viaviwebtech Android EBook App (Books App, PDF, ePub, Online Book Reading, Download Books) 10 via the author_CVE-2021-32436.1Wfilter ICF 5.0.117 contains a cross-site scripting (XSS) vulnerability. An attacker in the same LAN can craft a packet with a malicious UseCVE-2021-324345.5abcm2ps v8.14.11 was discovered to contain an out-of-bounds read in the function calculate_beam at draw.c.