CVE-2018-12456

Опубликовано: 10 окт. 2018

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

Intelbras NPLUG 1.0.0.14 wireless repeater devices have no CSRF token protection in the web interface, allowing attackers to perform actions such as changing the wireless SSID, rebooting the device, editing access control lists, or activating remote access.

Ссылки

http://seclists.org/fulldisclosure/2018/Oct/18
Exploit
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2018/Oct/18
Exploit
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:intelbras:nplug_firmware:1.0.0.14:*:*:*:*:*:*:*

cpe:2.3:h:intelbras:nplug:-:*:*:*:*:*:*:*

EPSS

Процентиль: 35%

0.00145

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-46w6-5wwg-wjfx