Neet AirStream NAS1.1 devices allow CSRF attacks that cause the settings binary to change the AP name and password.