Medium severity6.5NVD Advisory· Published Apr 9, 2021· Updated Jun 17, 2026
CVE-2021-25327
CVE-2021-25327
Description
Skyworth Digital Technology RN510 V.3.1.0.4 contains a cross-site request forgery (CSRF) vulnerability in /cgi-bin/net-routeadd.asp and /cgi-bin/sec-urlfilter.asp. Missing CSRF protection in devices can lead to XSRF, as the above pages are vulnerable to cross-site scripting (XSS).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Skyworth Digital Technology/RN510description
Patches
Vulnerability mechanics
References
3- packetstormsecurity.com/files/162454/Shenzhen-Skyworth-RN510-Cross-Site-Request-Forgery-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2021/May/6nvdExploitMailing ListThird Party Advisory
- s3curityb3ast.github.io/KSA-Dev-012.mdnvdThird Party Advisory
News mentions
0No linked articles in our index yet.