exploitDog

CVE-2019-25254

Опубликовано: 24 дек. 2025

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

KYOCERA Net Admin 3.4.0906 contains a cross-site request forgery vulnerability that allows attackers to create administrative users without proper request validation. Attackers can craft malicious web pages that automatically submit forms to add new admin accounts with predefined credentials when a logged-in user visits the page.

Ссылки

https://global.kyocera.com
Product
https://www.exploit-db.com/exploits/44431
Exploit
Third Party Advisory
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5458.php
Exploit
Third Party Advisory
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5458.php
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:kyocera:net_admin:3.4.0906:*:*:*:*:*:*:*

EPSS

Процентиль: 0%

0.00007

Низкий

8.8 High

CVSS3

Дефекты

CWE-352

Связанные уязвимости

GHSA-gqfp-2982-4j8v

CVSS3: 5.3

github

около 1 месяца назад

KYOCERA Net Admin 3.4.0906 contains a cross-site request forgery vulnerability that allows attackers to create administrative users without proper request validation. Attackers can craft malicious web pages that automatically submit forms to add new admin accounts with predefined credentials when a logged-in user visits the page.

EPSS

Процентиль: 0%

0.00007

Низкий

8.8 High

CVSS3

Дефекты

CWE-352