Ubee EVW327 - 'Enable Remote Access' Cross-Site Request Forgery (CSRF) | Advisories

Advisories

Ubee EVW327 - 'Enable Remote Access' Cross-Site Request Forgery (CSRF)

severity: medium
date: January 16, 2026
Affecting: Ubee EVW327 EVW327
CVE: CVE-2021-47820
CWE: CWE-352 Cross-Site Request Forgery (CSRF)
CVSS: 5.1
CVSS V4 Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
References: ExploitDB-49920
Ubee Interactive Official Homepage
Credit: lated
Description: Ubee EVW327 contains a cross-site request forgery vulnerability that allows attackers to enable remote access without user interaction. Attackers can craft a malicious webpage that automatically submits a form to change router remote access settings to port 8080 without the user's consent.