CVE-2020-23585 describes a Cross-Site Request Forgery (CSRF) vulnerability affecting OPTILINK OP-XT71000N routers (Hardware V2.2, Firmware OP_V3.3.1-191028). An attacker can exploit insufficient CSRF protections on "mgm_config_file.asp" to upload malicious XML data via "/boaform/admin/formMgmConfigUpload". This vulnerability is rated 8.8 HIGH (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), indicating a network-based attack with low complexity that requires user interaction, leading to full compromise of the router and network. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage for this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
3.3.1-191028CPE matchmatch criteria | cpe:2.3:o:optilinknetwork:op-xt71000n_firmware:3.3.1-191028:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.
Remediation records are not available for this CVE.