CVE-2022-45724
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
In the Comfast CF-WR6110N router version V2.3.1, an incorrect access control vulnerability was found. A remote attacker on the same network can send any HTTP request to an unauthenticated page, forcing the server to generate a SESSION_ID. Using this SESSION_ID, the attacker can then perform authenticated requests.
Risk Assessment
The risk is that an attacker on the same local network can gain unauthorized access to the router's administrative panel, potentially leading to device takeover and further network attacks.
Recommendation
It is recommended to immediately update the router firmware to the latest available version. If no update is available, restrict administrative panel access to trusted IP addresses only and consider replacing the device with a patched model.
Original NVD description (English source)
Incorrect Access Control in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the same network to perform any HTTP request to an unauthenticated page to force the server to generate a SESSION_ID, and using this SESSION_ID an attacker can then perform authenticated requests.