A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the Dbit N300 T1 Pro wireless router V1.0.0. The router fails to imp…

A Cross-Site Request Forgery vulnerability affects the Dbit N300 T1 Pro wireless router V1.0.0 web management interface. The router lacks proper CSRF protection mechanisms including anti-CSRF tokens and Origin/Referer validation for administrative API endpoints. Attackers can create malicious webpages that send forged HTTP requests to configuration endpoints like /api/setWlan. When authenticated administrators visit these malicious pages, their browsers automatically include valid session cookies, allowing unauthorized configuration changes. This vulnerability enables remote attackers to perform administrative actions without proper authorization through social engineering tactics.