recently, attacks against home routers were mounted via malicious iframes pushed to a PC in the LAN. That vector neither requires physical presence nor wifi pas

recently, attacks against home routers were mounted via malicious iframes pushed to a PC in the LAN. That vector neither requires physical presence nor wifi password cracking, merely CSRF. edit: known since 2008, http://www.techrepublic.com/blog/data-center/csrf-attacks-home-dsl-routers-are-vulnerable/ http://www.techrepublic.com/blog/data-center/csrf-attacks-ho...