CVE-2026-71273

MEDIUM 6.5

OpenBK7231T CSRF in /cfg_wifi_set Leading to Implicit Web Password Disable and WiFi Hijack

CVSS Score

6.5

EPSS Score

0.0%

EPSS Percentile

0th

OpenBK7231T's /cfg_wifi_set endpoint (src/httpserver/http_fns.c) accepts configuration changes via a plain GET request with no CSRF token. If the `web_admin_password_enabled` parameter is absent from the request, an else-branch silently clears the device's web admin password to an empty string. A one-click CSRF payload (e.g. an <img> tag pointing at /cfg_wifi_set with new SSID/password parameters and web_admin_password_enabled omitted) visited by an authenticated admin's browser both hijacks the device's WiFi configuration and disables its web password protection.

CWE	CWE-352
Vendor	openshwprojects
Product	openbk7231t_app
Published	Aug 5, 2026
Last Updated	Aug 5, 2026

Stay Ahead of the Next One

Get instant alerts for openshwprojects openbk7231t_app

Be the first to know when new medium vulnerabilities affecting openshwprojects openbk7231t_app are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

openshwprojects / OpenBK7231T_App

0 ≤ *

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/openshwprojects/OpenBK7231T_App github.com: https://github.com/openshwprojects/OpenBK7231T_App/blob/main/src/httpserver/http_fns.c

Credits

Alibek Baxtiyorov