Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8vm5-mx6j-hvfc

Опубликовано: 26 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 5.3

Описание

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to missing secure flag for the session cookies associated with the router's web management interface. An attacker with remote access could exploit this by intercepting transmission within an HTTP session on the vulnerable system.

Successful exploitation of this vulnerability could allow the attacker to capture cookies and compromise the targeted system.

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to missing secure flag for the session cookies associated with the router's web management interface. An attacker with remote access could exploit this by intercepting transmission within an HTTP session on the vulnerable system.

Successful exploitation of this vulnerability could allow the attacker to capture cookies and compromise the targeted system.

EPSS

Процентиль: 30%
0.00112
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-614

Связанные уязвимости

CVSS3: 5.3
nvd
больше 1 года назад

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to missing secure flag for the session cookies associated with the router's web management interface. An attacker with remote access could exploit this by intercepting transmission within an HTTP session on the vulnerable system. Successful exploitation of this vulnerability could allow the attacker to capture cookies and compromise the targeted system.

EPSS

Процентиль: 30%
0.00112
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-614