Edimax GS-5008PL Cross-Site Request Forgery Vulnerability

A cross-site request forgery (CSRF) vulnerability has been identified in the Edimax GS-5008PL switch, affecting firmware versions through 1.00.54. This vulnerability allows remote attackers to perform unauthorized administrative actions by tricking logged-in administrators into visiting malicious pages. The absence of anti-CSRF tokens and proper request validation can be exploited to change passwords, upload firmware, reboot the device, perform factory resets, or alter network configurations.

Impact

Exploitation of this vulnerability could lead to unauthorized administrative actions on the affected device, allowing for significant changes to the device's configuration and management.