Missing CSRF Protection on Administrative Endpoints in Nexxt Nebula 300+
Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 does not implement CSRF protections on state-changing endpoints such as /goform/setSysTools and other administrative interfaces. As a result, an attacker can craft malicious web requests that are executed in the context of an authenticated administrator’s browser, leading to unauthorized configuration changes, including enabling services or modifying system settings.
A remote attacker can cause an authenticated administrator's browser to send forged state-changing requests, resulting in unauthorized configuration changes.
CAPEC ID: N/A
Description: A remote attacker can cause an authenticated administrator's browser to send forged state-changing requests, resulting in unauthorized configuration changes.