Cable Forum - 100M ERROR: CSRF Detect

Page 1 of 3

Show 100 post(s) from this thread on one page

Cable Forum (https://www.cableforum.uk/board/index.php)

- Virgin Media Internet Service (https://www.cableforum.uk/board/forumdisplay.php?f=12)

- - 100M : ERROR: CSRF Detect (https://www.cableforum.uk/board/showthread.php?t=33701973)

Taf	14-12-2015 12:23

ERROR: CSRF Detect

This is a new error I see in my network logs very often. The tech who has been here a couple of times has no idea what it means. Any ideas? :dunce:

Quote:

Error Number 90000200 CSRF Detect - Expired Content Submitted ; LAN Interface

pip08456

14-12-2015 12:29

Re: ERROR: CSRF Detect

Never heard of google?

http://www.veracode.com/security/csrf

Taf	14-12-2015 12:41

Re: ERROR: CSRF Detect

Yes, I'd read that already, but how does it relate to VM's network?

pip08456

14-12-2015 13:41

Re: ERROR: CSRF Detect

It doesn't.

qasdfdsaq

14-12-2015 14:02

Re: ERROR: CSRF Detect

Quote:

Originally Posted by pip08456 (Post 35812817)

It doesn't.

Precisely.

ianch99

14-12-2015 16:04

Re: ERROR: CSRF Detect

Nice replies ... I am sure the OP is much the wiser.

pip08456

14-12-2015 17:12

Re: ERROR: CSRF Detect

Quote:

Originally Posted by ianch99 (Post 35812836)

Nice replies ... I am sure the OP is much the wiser.

The answer is in the link and is quite clear what it is.

ianch99

14-12-2015 18:08

Re: ERROR: CSRF Detect

Quote:

Originally Posted by pip08456 (Post 35812847)

The answer is in the link and is quite clear what it is.

I think the OP was asking what this error means in the context of it being generated by VM cable modem. The link you mention has no reference to the error message per se hence his question ..

I suspect the cable modem firmware has code looking for attempts to exploit a CSRF vulnerability on the modem's web interface and maybe this was a false positive?

Taf	14-12-2015 18:14

Re: ERROR: CSRF Detect

It only appeared when I was upgraded to SHUB 2ac. A network manager was asked what it meant and he had no clue either. The "LAN interface" bit made the tech do a doubletake.....

qasdfdsaq

15-12-2015 10:16

Re: ERROR: CSRF Detect

Quote:

Originally Posted by ianch99 (Post 35812850)

I think the OP was asking what this error means in the context of it being generated by VM cable modem

It is not being generated by VM cable modem.

pip08456

15-12-2015 10:35

Re: ERROR: CSRF Detect

Correct

ianch99

15-12-2015 10:57

Re: ERROR: CSRF Detect

Quote:

Originally Posted by qasdfdsaq (Post 35812904)

It is not being generated by VM cable modem.

What else writes to the cable modem log?

qasdfdsaq

15-12-2015 11:20

Re: ERROR: CSRF Detect

Quote:

Originally Posted by ianch99 (Post 35812913)

What else writes to the cable modem log?

It is not in the cable modem log.

ianch99

15-12-2015 11:24

Re: ERROR: CSRF Detect

Quote:

Originally Posted by qasdfdsaq (Post 35812915)

It is not in the cable modem log.

Taf, can you confirm?

Taf	15-12-2015 13:23

Re: ERROR: CSRF Detect

Yes the error appears in the SHUB 2ac modem log. For example:

15/11/2015 11:59:20 GMT 90000200 CSRF Detect - Expired Content Submitted ; LAN Interface

28/11/2015 00:16:56 GMT 90000200 CSRF Detect - Expired Content Submitted ; LAN Interface

28/11/2015 17:36:34 GMT 90000200 CSRF Detect - Expired Content Submitted ; LAN Interface

28/11/2015 16:32:24 GMT 90000200 CSRF Detect - Expired Content Submitted ; LAN Interface

29/11/2015 00:17:42 GMT 90000200 CSRF Detect - Expired Content Submitted ; LAN Interface

All times are GMT. The time now is 21:35.

Page 1 of 3

Show 100 post(s) from this thread on one page