CVE-2019-7391

ZyXEL VMG3312-B10B DSL-491HNU-B1B v2 devices allow login/login-page.cgi CSRF.

• CWE-352

• http://packetstormsecurity.com/files/151550/Zyxel-VMG3312-B10B-DSL-491HNU-B1-V2-Cross-Site-Request-Forgery.htmlExploit, Third Party Advisory, VDB Entry
• https://twitter.com/h1_yusufThird Party Advisory
• https://www.exploit-db.com/exploits/46326/Exploit, Third Party Advisory, VDB Entry
• https://www.owasp.org/index.php/Cross-Site_Request_Forgery_%28CSRF%29
• http://packetstormsecurity.com/files/151550/Zyxel-VMG3312-B10B-DSL-491HNU-B1-V2-Cross-Site-Request-Forgery.htmlExploit, Third Party Advisory, VDB Entry
• https://twitter.com/h1_yusufThird Party Advisory
• https://www.exploit-db.com/exploits/46326/Exploit, Third Party Advisory, VDB Entry
• https://www.owasp.org/index.php/Cross-Site_Request_Forgery_%28CSRF%29

Published

Mar 21, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-7385An authenticated shell command injection issue has been disc…7.8
• CVE-2019-7386A Denial of Service issue has been discovered in the Gecko c…
• CVE-2019-7387A local file inclusion vulnerability exists in the web inter…
• CVE-2019-7388An issue was discovered in /bin/goahead on D-Link DIR-823G d…
• CVE-2019-7389An issue was discovered in /bin/goahead on D-Link DIR-823G d…
• CVE-2019-7390An issue was discovered in /bin/goahead on D-Link DIR-823G d…
• CVE-2019-7392An improper authentication vulnerability in CA Privileged Ac…
• CVE-2019-7393A UI redress vulnerability in the administrative user interf…4.3
• CVE-2019-7394A privilege escalation vulnerability in the administrative u…8.8
• CVE-2019-7395In ImageMagick before 7.0.8-25, a memory leak exists in Writ…7.5
• CVE-2019-7396In ImageMagick before 7.0.8-25, a memory leak exists in Read…7.5
• CVE-2019-7397In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.…7.5