CVE-2018-7524

Опубликовано: 22 мар. 2018

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

A cross-site request forgery vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow an unauthorized user to be added to the system.

Ссылки

http://www.securityfocus.com/bid/103474
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-079-01
Mitigation
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/103474
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-079-01
Mitigation
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:geutebrueck:g-cam\/efd-2250_firmware:1.12.0.4:*:*:*:*:*:*:*

cpe:2.3:h:geutebrueck:g-cam\/efd-2250:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:geutebrueck:topfd-2125_firmware:3.15.1:*:*:*:*:*:*:*

cpe:2.3:h:geutebrueck:topfd-2125:-:*:*:*:*:*:*:*

EPSS

Процентиль: 22%

0.00072

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-87vf-f88q-65rp