The exploit demonstrates multiple vulnerabilities in the Davolink DV-2051 modem, including unauthenticated admin password change, CSRF, and persistent XSS. The PoC provides direct HTTP requests to exploit these issues without requiring prior authentication.
Classification
Working Poc 100%
Attack Type
Auth Bypass | Xss | Other
Complexity
Trivial
Reliability
Reliable
Target:Davolink DV-2051 modem
No auth needed
Prerequisites:Network access to the target modem · Knowledge of the modem's IP address