Description: hkm has reported a vulnerability in 2wire routers, which can be exploited by malicious people to conduct cross-site request forgery attacks.
The vulnerability is caused due the administrative web interface allowing users to perform certain sensitive actions via HTTP requests without verifying the validity of the user's request. This can be exploited to perform certain actions on the device when a logged in administrator is tricked into visiting a malicious web page.
The vulnerability is reported in 1701HG version 3.17.5 and 2071 Gateway version 5.29.51. Other versions may also be affected.
Solution: Do not browse untrusted web sites while being logged in to the administrative section of the device.
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
