Описание
MZK-DP300N firmware versions 1.04 and earlier contains a cross-site request forger vulnerability. Viewing a malicious page while logging in to the web management page of the affected product may lead the user to perform unintended operations such as changing the login password, etc.
Ссылки
- Third Party Advisory
- Product
Уязвимые конфигурации
Конфигурация 1Версия до 1.04 (включая)
Одновременно
cpe:2.3:o:planex:mzk-dp300n_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:planex:mzk-dp300n:-:*:*:*:*:*:*:*
EPSS
Процентиль: 27%
0.00095
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-352
CWE-352
Связанные уязвимости
CVSS3: 6.5
github
больше 1 года назад
MZK-DP300N firmware versions 1.04 and earlier contains a cross-site request forger vulnerability. Viewing a malicious page while logging in to the web management page of the affected product may lead the user to perform unintended operations such as changing the login password, etc.
EPSS
Процентиль: 27%
0.00095
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-352
CWE-352