CVE-2024-40119

{"id": "CVE-2024-40119", "cveTags": [], "metrics": {}, "published": "2024-07-17T20:15:06.423", "references": [{"url": "https://github.com/sudo-subho/nepstech-xpon-router-CVE-2024-40119", "source": "cve@mitre.org"}], "vulnStatus": "Awaiting Analysis", "descriptions": [{"lang": "en", "value": "Nepstech Wifi Router xpon (terminal) model NTPL-Xpon1GFEVN v.1.0 Firmware V2.0.1 contains a Cross-Site Request Forgery (CSRF) vulnerability in the password change function, which allows remote attackers to change the admin password without the user's consent, leading to a potential account takeover."}, {"lang": "es", "value": "Nepstech Wifi Router xpon (terminal) modelo NTPL-Xpon1GFEVN v.1.0 Firmware V2.0.1 contiene una vulnerabilidad de Cross-Site Request Forgery (CSRF) en la funci\u00f3n de cambio de contrase\u00f1a, que permite a atacantes remotos cambiar la contrase\u00f1a de administrador sin el consentimiento del usuario, lo que lleva a a una posible apropiaci\u00f3n de cuentas."}], "lastModified": "2024-07-18T12:28:43.707", "sourceIdentifier": "cve@mitre.org"}