An issue was discovered on Intex N150 devices. The router firmware suffers from multiple CSRF injection point vulnerabilities including changing user passwords and router settings.
https://www.exploit-db.com/exploits/44939/
http://securitywarrior9.blogspot.com/2018/06/cross-site-request-forgery-intex-router.html