Description
A specific router allows changing the Wi-Fi password remotely. Genexis Platinum 4410 V2-1.28, a compact router generally used at homes and offices was found to be vulnerable to Broken Access Control and CSRF which could be combined to remotely change the WIFI access point’s password.
Exploits (1)
exploitdb
WORKING POC
by Jinson Varghese Behanan · textwebappshardware
https://www.exploit-db.com/exploits/49000
References (3)
Scores
CVSS v3
6.5
EPSS
0.0034
EPSS Percentile
56.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Details
CWE
CWE-352
Status
published
Products (1)
genexis/platinum_4410_firmware
p4410-v2-1.28
Published
Sep 16, 2020
Tracked Since
Feb 18, 2026