Exploitation Summary
EIP tracks 1 public exploit for CVE-2018-6023. PoCs published by Raffaele Sabato.
AI-analyzed exploit summary This is a working proof-of-concept for a CSRF vulnerability in Fastweb FASTgate 0.00.47. It demonstrates how an attacker can activate the guest Wi-Fi feature by tricking an authenticated user into submitting a malicious form.
Description
Fastweb FASTgate 0.00.47 devices are vulnerable to CSRF, with impacts including Wi-Fi password changing, Guest Wi-Fi activating, etc.
Exploits (1)
exploitdb
WORKING POC
by Raffaele Sabato · htmlwebappshardware
https://www.exploit-db.com/exploits/44606
This is a working proof-of-concept for a CSRF vulnerability in Fastweb FASTgate 0.00.47. It demonstrates how an attacker can activate the guest Wi-Fi feature by tricking an authenticated user into submitting a malicious form.
Classification
Working Poc 100%
Attack Type
Other
Complexity
Trivial
Reliability
Reliable
Target:
Fastweb FASTgate 0.00.47
Auth required
Prerequisites:
Victim must be authenticated to the router's admin interface · Victim must visit the malicious HTML page
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (2)
Core 2
Core References
Exploit, Third Party Advisory, VDB Entry x_refsource_misc
http://packetstormsecurity.com/files/147571/Fastweb-FASTGate-0.00.47-Cross-Site-Request-Forgery.html
Exploit, Third Party Advisory, VDB Entry exploit
x_refsource_exploit-db
https://www.exploit-db.com/exploits/44606/
Scores
CVSS v3
8.8
EPSS
0.0024
EPSS Percentile
47.0%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-352
Status
published
Products (1)
fastweb/fastgate_firmware
0.00.47
Published
May 11, 2018
Tracked Since
Feb 18, 2026