CVE:CVE-2019-7440
CNNVD:CNNVD-201903-797
JioFi 4G M2S 1.0.2版本中存在跨站请求伪造漏洞。远程攻击者可借助SSID名称和Security Key字段利用该漏洞以管理权限执行操作。
solution:Upgrade jio jiofi_4g_m2s_firmware to a higher version than 1.0.2,and avoid the version 1.0.2