Browser Hack Allows Router Control > Not at risk if you changed default password on router

said by evilghost
Routers vulnerable to CSRF are still exploitable IF the user has a trusted session with the configuration page and accesses a hostile site.

How many routers are using session versus cookies for verifying successful authentication?
[/BQUOTE :

Don't most routers automatically time out the session after a period of time? If I'm in my router, and I stay on the same page for a couple minutes, when I change pages I have to login again.