CVE-2020-13620 – Fastweb FASTGate GPON FGA2130FWB devices through 2020-05-26 allow CSRF vi

Fastweb FASTGate GPON FGA2130FWB devices through 2020-05-26 allow CSRF via the router administration web panel, leading to an attacker’s ability to perform administrative actions such as modifying the configuration.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13620

Reference (s):

• https://lucadidomenico.medium.com/fastgate-gpon-cross-site-request-forgery-cve-2020-13620-e279f3fbaee4
• https://members.backbox.org/fastgate-gpon-cross-site-request-forgery/