CVE-2015-7284

Опубликовано: 31 дек. 2015

Источник: nvd

CVSS3: 8

CVSS2: 6.8

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability on ZyXEL NBG-418N devices with firmware 1.00(AADZ.3)C0 allows remote attackers to hijack the authentication of arbitrary users.

Ссылки

http://www.securityfocus.com/bid/78819
http://www.securitytracker.com/id/1034554
https://www.kb.cert.org/vuls/id/330000
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/78819
http://www.securitytracker.com/id/1034554
https://www.kb.cert.org/vuls/id/330000
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:zyxel:nbg-418n_firmware:1.00\(aadz.3\)c0:*:*:*:*:*:*:*

cpe:2.3:h:zyxel:nbg-418n:*:*:*:*:*:*:*:*

EPSS

Процентиль: 32%

0.00125

Низкий

8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-f5xm-rhm7-5w9q