The OpenBK7231T_App contains a CSRF vulnerability (CWE-352) in its /cfg_wifi_set endpoint implemented in src/httpserver/http_fns.c. This endpoint processes configuration changes through a plain GET request without requiring a CSRF token. If the expected parameter is absent, the code path clears the device's web admin password to an empty string without notification. This behavior could allow an attacker to reset the admin password remotely by sending a crafted GET request, leading to unauthorized configuration changes. The CVSS 3.1 score is 6.5 (medium), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact.

An attacker can exploit this vulnerability remotely over the network without privileges but requires user interaction. The main impact is high integrity loss as the attacker can reset the web admin password to empty, potentially gaining unauthorized administrative access and changing device configurations. There is no direct confidentiality or availability impact reported.

No official patch or remediation guidance is currently available from the vendor. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, users should restrict access to the device's web interface to trusted networks and monitor for suspicious configuration changes. Implementing network-level protections such as firewall rules to block unauthorized access to the /cfg_wifi_set endpoint may help mitigate exploitation.