CVE-2017-14267

EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices have CSRF, related to goform/AddNewProfile, goform/setWanDisconnect, goform/setSMSAutoRedirectSetting, goform/setReset, and goform/uploadBackupSettings.

• CWE-352

• http://seclists.org/fulldisclosure/2017/Sep/13Exploit, Mailing List, Third Party Advisory
• https://blog.jameshemmings.co.uk/2017/08/24/ee-4gee-mobile-wifi-router-multiple-security-vulnerabilities-writeupExploit, Third Party Advisory
• https://github.com/JamesIT/vuln-advisories-/blob/master/EE-4GEE-Multiple-Vulns/CSRF/AddProfileCSRFXSSPoc.htmlExploit, Third Party Advisory
• https://github.com/JamesIT/vuln-advisories-/blob/master/EE-4GEE-Multiple-Vulns/CSRF/CSRFInternetDCPoC.htmlExploit, Third Party Advisory
• https://github.com/JamesIT/vuln-advisories-/blob/master/EE-4GEE-Multiple-Vulns/CSRF/CSRFPocRedirectSMS.htmlExploit, Third Party Advisory
• https://github.com/JamesIT/vuln-advisories-/blob/master/EE-4GEE-Multiple-Vulns/CSRF/CSRFPocResetDefaults.htmlExploit, Third Party Advisory
• https://github.com/JamesIT/vuln-advisories-/blob/master/EE-4GEE-Multiple-Vulns/CSRF/uploadBinarySettingsCSRFPoC.htmlExploit, Third Party Advisory
• http://seclists.org/fulldisclosure/2017/Sep/13Exploit, Mailing List, Third Party Advisory
• https://blog.jameshemmings.co.uk/2017/08/24/ee-4gee-mobile-wifi-router-multiple-security-vulnerabilities-writeupExploit, Third Party Advisory
• https://github.com/JamesIT/vuln-advisories-/blob/master/EE-4GEE-Multiple-Vulns/CSRF/AddProfileCSRFXSSPoc.htmlExploit, Third Party Advisory
• https://github.com/JamesIT/vuln-advisories-/blob/master/EE-4GEE-Multiple-Vulns/CSRF/CSRFInternetDCPoC.htmlExploit, Third Party Advisory
• https://github.com/JamesIT/vuln-advisories-/blob/master/EE-4GEE-Multiple-Vulns/CSRF/CSRFPocRedirectSMS.htmlExploit, Third Party Advisory
• https://github.com/JamesIT/vuln-advisories-/blob/master/EE-4GEE-Multiple-Vulns/CSRF/CSRFPocResetDefaults.htmlExploit, Third Party Advisory
• https://github.com/JamesIT/vuln-advisories-/blob/master/EE-4GEE-Multiple-Vulns/CSRF/uploadBinarySettingsCSRFPoC.htmlExploit, Third Party Advisory

Published

Sep 11, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14260In the SDK in Bento4 1.5.0-616, the AP4_StssAtom class in Ap…
• CVE-2017-14261In the SDK in Bento4 1.5.0-616, the AP4_StszAtom class in Ap…
• CVE-2017-14262On Samsung NVR devices, remote attackers can read the MD5 pa…
• CVE-2017-14263Honeywell NVR devices allow remote attackers to create a use…
• CVE-2017-14265A Stack-based Buffer Overflow was discovered in xtrans_inter…
• CVE-2017-14266tcprewrite in Tcpreplay 3.4.4 has a Heap-Based Buffer Overfl…7.8
• CVE-2017-14268EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices have XSS …
• CVE-2017-14269EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices allow rem…
• CVE-2017-1427IBM Cognos Analytics 11.0 is vulnerable to cross-site script…
• CVE-2017-14270XnView Classic for Windows Version 2.40 allows attackers to …
• CVE-2017-14271XnView Classic for Windows Version 2.40 allows attackers to …
• CVE-2017-14272XnView Classic for Windows Version 2.40 allows attackers to …