Описание
Edimax GS-5008PL firmware version 1.00.54 and prior contain a cross-site request forgery vulnerability that allows remote attackers to perform unauthorized administrative actions by inducing logged-in administrators to visit malicious pages. Attackers can exploit the lack of anti-CSRF tokens and request validation to change passwords, upload firmware, reboot the device, perform factory resets, or modify network configurations.
Ссылки
- Product
- Product
- Third Party Advisory
Уязвимые конфигурации
Одновременно
EPSS
4.3 Medium
CVSS3
6.5 Medium
CVSS3
Дефекты
Связанные уязвимости
Edimax GS-5008PL firmware version 1.00.54 and prior contain a cross-site request forgery vulnerability that allows remote attackers to perform unauthorized administrative actions by inducing logged-in administrators to visit malicious pages. Attackers can exploit the lack of anti-CSRF tokens and request validation to change passwords, upload firmware, reboot the device, perform factory resets, or modify network configurations.
Уязвимость микропрограммного обеспечения коммутаторов EDIMAX GS-5008PL, связанная с подделкой межсайтовых запросов, позволяющая нарушителю получить доступ на изменение пароля, перезагрузку устройства и сброс системных настроек
EPSS
4.3 Medium
CVSS3
6.5 Medium
CVSS3