Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hprf-f9v4-9r3r

Опубликовано: 28 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 5.7
CVSS3: 7.8

Описание

Cross-site request forgery (CSRF) vulnerability in the web application of saTECH BCU firmware version 2.1.3, which could allow an unauthenticated local attacker to exploit active administrator sessions and perform malicious actions. The malicious actions that can be executed by the attacker depend on the logged-in user, and may include rebooting the device or modifying roles and permissions.

Cross-site request forgery (CSRF) vulnerability in the web application of saTECH BCU firmware version 2.1.3, which could allow an unauthenticated local attacker to exploit active administrator sessions and perform malicious actions. The malicious actions that can be executed by the attacker depend on the logged-in user, and may include rebooting the device or modifying roles and permissions.

EPSS

Процентиль: 7%
0.00026
Низкий

5.7 Medium

CVSS4

7.8 High

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 7.8
nvd
11 месяцев назад

Cross-site request forgery (CSRF) vulnerability in the web application of saTECH BCU firmware version 2.1.3, which could allow an unauthenticated local attacker to exploit active administrator sessions and perform malicious actions. The malicious actions that can be executed by the attacker depend on the logged-in user, and may include rebooting the device or modifying roles and permissions.

EPSS

Процентиль: 7%
0.00026
Низкий

5.7 Medium

CVSS4

7.8 High

CVSS3

Дефекты

CWE-352