Secunia

Jerome Athias has reported a vulnerability in Huawei MT880, which can be exploited by malicious people to conduct cross-site request forgery attacks.

The web-based administrative interface allows users to perform certain actions via HTTP requests without performing any validation checks to verify the requests. This can be exploited to e.g. add administrative users or change certain configuration settings when a logged-in administrative user visits a malicious web page.

Solution
Do not browse untrusted web sites or follow untrusted links while being logged-in to the web interface.

Provided and/or discovered by
Jerome Athias

Original Advisory
http://archives.neohapsis.com/archives/bugtraq/2009-08/0029.html

Deep Links
Links available in Customer Area