CVE-2016-1175

Опубликовано: 05 апр. 2016

Источник: nvd

CVSS3: 4.3

CVSS2: 5.8

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in AQUOS Photo Player HN-PP150 1.02.00.04 through 1.03.01.04 allows remote attackers to hijack the authentication of arbitrary users.

Ссылки

http://jvn.jp/en/jp/JVN47164236/index.html
Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000039
Vendor Advisory
http://www.sharp.co.jp/support/photoplayer/fw_update.html
Vendor Advisory
http://jvn.jp/en/jp/JVN47164236/index.html
Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000039
Vendor Advisory
http://www.sharp.co.jp/support/photoplayer/fw_update.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:h:sharp:aquos_hn-pp150:-:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:sharp:aquos_hn-pp150_firmware:1.02.00.04:*:*:*:*:*:*:*

cpe:2.3:o:sharp:aquos_hn-pp150_firmware:1.03.01.04:*:*:*:*:*:*:*

EPSS

Процентиль: 19%

0.00061

Низкий

4.3 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-773p-m7cr-6h5f