Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mpjf-jjj3-xgm7

Опубликовано: 17 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Nepstech Wifi Router xpon (terminal) model NTPL-Xpon1GFEVN v.1.0 Firmware V2.0.1 contains a Cross-Site Request Forgery (CSRF) vulnerability in the password change function, which allows remote attackers to change the admin password without the user's consent, leading to a potential account takeover.

Nepstech Wifi Router xpon (terminal) model NTPL-Xpon1GFEVN v.1.0 Firmware V2.0.1 contains a Cross-Site Request Forgery (CSRF) vulnerability in the password change function, which allows remote attackers to change the admin password without the user's consent, leading to a potential account takeover.

EPSS

Процентиль: 89%
0.05012
Низкий

8.8 High

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 8.8
nvd
больше 1 года назад

Nepstech Wifi Router xpon (terminal) model NTPL-Xpon1GFEVN v.1.0 Firmware V2.0.1 contains a Cross-Site Request Forgery (CSRF) vulnerability in the password change function, which allows remote attackers to change the admin password without the user's consent, leading to a potential account takeover.

EPSS

Процентиль: 89%
0.05012
Низкий

8.8 High

CVSS3

Дефекты

CWE-352