Executive Summary

This vulnerability exists in the Genexis Platinum P4410 router firmware where after an administrator logs out, the session token is not invalidated and remains valid. A local network attacker can reuse this stale session token to send specially crafted requests to the router's diagnostic endpoint, allowing them to execute commands with root privileges remotely.

Useful 0 Not Useful 0

Impact Analysis

An attacker on the local network can exploit this vulnerability to gain root-level remote code execution on the affected router. This could allow the attacker to take full control of the device, potentially intercepting or manipulating network traffic, disrupting network services, or using the router as a foothold for further attacks within the network.

Useful 0 Not Useful 0