Back to Database
Status published
Medium
CVE-2009-2323
The web interface on the Axesstel MV 410R redirects users...
Vulnerability Description
The web interface on the Axesstel MV 410R redirects users back to the referring page after execution of some CGI scripts, which makes it easier for remote attackers to avoid detection of cross-site request forgery (CSRF) attacks, as demonstrated by a redirect from the cgi-bin/wireless.cgi script.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-2323
Credits & Attribution
No credits recorded in the NVD database.
References
More from axesstel
View All →CVE-2017-13724
On the Axesstel MU553S MU55XS-V1.14, there is a Stored Cross...
Medium
5.4
CVE-2017-11351
Axesstel MU553S MU55XS-V1.14 devices have a default password of admin...
Critical
9.8
CVE-2017-11350
Cross-Site Request Forgery (CSRF) exists in cgi-bin/ConfigSet on Axesstel MU553S...
High
8.8
CVE-2009-2322
Cross-site scripting (XSS) vulnerability in cgi-bin/sysconf.cgi on the Axesstel MV...
Medium
4.3
CVE-2009-2321
cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to...
High
7.8
Affected Vendor
axesstel
View all reports →Affected Software
mv 410r
Vulnerable Versions:
Unknown
Timeline
Official Publish:
July 5th, 2009
Last Modified:
August 7th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.