Unrated severityNVD Advisory· Published Feb 13, 2023· Updated Mar 24, 2025

CVE-2022-45724

Description

Incorrect Access Control in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the same network to perform any HTTP request to an unauthenticated page to force the server to generate a SESSION_ID, and using this SESSION_ID an attacker can then perform authenticated requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Comfast/CF-WR6110Ndescription
Comfast/CF-WR6110Nllm-create
Range: V2.3.1

Patches

Vulnerability mechanics

References

cf-wr6110n.commitre
comfast.commitre
sn0ox.com/research/2023/02/05/CVE-COMFAST-CF-WR610N.htmlmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000