CVE-2026-71273: CWE-352 in openshwprojects OpenBK7231T_App
OpenBK7231T's /cfg_wifi_set endpoint (src/httpserver/http_fns.c) accepts configuration changes via a plain GET request with no CSRF token. If the `web_admin_password_enabled` parameter is absent from the request, an else-branch silently clears the device's web admin password to an empty string. A one-click CSRF payload (e.g. an <img> tag pointing at /cfg_wifi_set with new SSID/password parameters and web_admin_password_enabled omitted) visited by an authenticated admin's browser both hijacks the device's WiFi configuration and disables its web password protection.
AI Analysis
Technical Summary
The OpenBK7231T_App's /cfg_wifi_set HTTP endpoint accepts configuration changes through a plain GET request without CSRF protection. If the web_admin_password_enabled parameter is missing, the device's web admin password is reset to an empty string. This enables a one-click CSRF attack whereby an authenticated administrator visiting a malicious page can have their device's WiFi settings hijacked and web password protection disabled without their explicit consent.
Potential Impact
An attacker can perform a Cross-Site Request Forgery (CSRF) attack on an authenticated administrator's browser to change the device's WiFi configuration and disable the web admin password. This compromises the integrity of the device's network settings and removes password protection, potentially allowing unauthorized access to the device.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, administrators should avoid visiting untrusted web pages while authenticated to the device's web interface and consider additional network-level protections to prevent CSRF exploitation.
CVE-2026-71273: CWE-352 in openshwprojects OpenBK7231T_App
Description
OpenBK7231T's /cfg_wifi_set endpoint (src/httpserver/http_fns.c) accepts configuration changes via a plain GET request with no CSRF token. If the `web_admin_password_enabled` parameter is absent from the request, an else-branch silently clears the device's web admin password to an empty string. A one-click CSRF payload (e.g. an <img> tag pointing at /cfg_wifi_set with new SSID/password parameters and web_admin_password_enabled omitted) visited by an authenticated admin's browser both hijacks the device's WiFi configuration and disables its web password protection.
CVSS v3.1
Score 6.5medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The OpenBK7231T_App's /cfg_wifi_set HTTP endpoint accepts configuration changes through a plain GET request without CSRF protection. If the web_admin_password_enabled parameter is missing, the device's web admin password is reset to an empty string. This enables a one-click CSRF attack whereby an authenticated administrator visiting a malicious page can have their device's WiFi settings hijacked and web password protection disabled without their explicit consent.
Potential Impact
An attacker can perform a Cross-Site Request Forgery (CSRF) attack on an authenticated administrator's browser to change the device's WiFi configuration and disable the web admin password. This compromises the integrity of the device's network settings and removes password protection, potentially allowing unauthorized access to the device.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, administrators should avoid visiting untrusted web pages while authenticated to the device's web interface and consider additional network-level protections to prevent CSRF exploitation.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- TuranSec
- Date Reserved
- 2026-08-05T12:23:34.967Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a7336e5bf8831d539ed9252
Added to database: 08/05/2026, 13:13:09 UTC
Last enriched: 08/05/2026, 13:30:50 UTC
Last updated: 08/05/2026, 20:37:09 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.