CVE-2020-29292

Опубликовано: 30 дек. 2021

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

iBall WRD12EN 1.0.0 devices allow cross-site request forgery (CSRF) attacks as demonstrated by enabling DNS settings or modifying the range for IP addresses.

Ссылки

https://github.com/Nitya91/iBall-WRD12EN-1.0.0
Third Party Advisory
https://www.iball.co.in/
Vendor Advisory
https://github.com/Nitya91/iBall-WRD12EN-1.0.0
Third Party Advisory
https://www.iball.co.in/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:iball:wrd12en_firmware:1.0.0:*:*:*:*:*:*:*

cpe:2.3:h:iball:wrd12en:-:*:*:*:*:*:*:*

EPSS

Процентиль: 31%

0.0012

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-qf29-4539-q2c7

github

около 4 лет назад