Описание
Ubiquiti Networks EdgeOS version 1.9.1 and prior suffer from a Cross-Site Request Forgery (CSRF) vulnerability. An attacker with access to an operator (read-only) account could lure an admin (root) user to access the attacker-controlled page, allowing the attacker to gain admin privileges in the system.
Ссылки
- PatchVendor Advisory
- Third Party Advisory
- PatchVendor Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.9.1 (включая)
cpe:2.3:o:ubnt:edgeos:*:*:*:*:*:*:*:*
EPSS
Процентиль: 40%
0.0018
Низкий
8 High
CVSS3
8.5 High
CVSS2
Дефекты
CWE-352
CWE-352
Связанные уязвимости
CVSS3: 8
github
больше 3 лет назад
Ubiquiti Networks EdgeOS version 1.9.1 and prior suffer from a Cross-Site Request Forgery (CSRF) vulnerability. An attacker with access to an operator (read-only) account could lure an admin (root) user to access the attacker-controlled page, allowing the attacker to gain admin privileges in the system.
EPSS
Процентиль: 40%
0.0018
Низкий
8 High
CVSS3
8.5 High
CVSS2
Дефекты
CWE-352
CWE-352