Ivano Binetti has reported a vulnerability in Sitecom WLM-2501 Wireless Modem Router 300N, which can be exploited by malicious people to conduct cross-site request forgery attacks.

The application's web interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to e.g. change administrative settings by tricking a logged in administrator into visiting a malicious web site.

The vulnerability is reported in versions prior to 1.03.

Solution
Update to firmware version 1.03.

Provided and/or discovered by
Ivano Binetti.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Ivano Binetti:
http://www.webapp-security.com/wp-content/uploads/2012/03/Sitecom-WLM-2501-new-Multiple-CSRF-Vulnerabilities-1.txt

Sitecom:
http://www.sitecom.com/support-product/productid/859

Deep Links
Links available to Secunia VIM customers