Secunia

Ivan Markovic has reported some vulnerabilities in Huawei HG510, which can be exploited by malicious people to bypass certain security restrictions and conduct cross-site request forgery attacks.

1) The device allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to e.g. reboot the device or change certain settings (including passwords).

2) The device does not properly restrict access to the rebootinfo.cgi script. This can be exploited to reboot the device by accessing the script directly.

Note: This can also be exploited via cross-site request forgery attacks (see vulnerability #1).

Solution
Reportedly fixed. Contact the vendor for additional information.

Provided and/or discovered by
Ivan Markovic, Network Security Solutions

Changelog
Further details available in Customer Area

Original Advisory
http://archives.neohapsis.com/archives/bugtraq/2010-02/0155.html

Deep Links
Links available in Customer Area