CVE:CVE-2011-0886
CNNVD:CNNVD-201102-091
带有1.4.0.49.2之前版本固件的SMC SMCD3G-CCR(又名Comcast Business Gateway)的web界面中存在多个跨站请求伪造漏洞。远程攻击者可以(1)借助goform/login劫持任意用户执行登录的内网连接，(2)借助对goform/RemoteRange的mso_remote_enable操作劫持管理员启用外部登陆的认证，(3)或借助对goform/Basic的manual_dns_enable操作改变DNS设置。
solution:Upgrade smc_networks smcd3g-ccr to a higher version than *; Upgrade smc_networks smcd3g-ccr_firmware to a higher version than 1.4.0.49,1.4.0.42,and avoid the version (,1.4.0.49],1.4.0.42