PT-2020-13049
CVE-2020-12123
·
تاريخ النشر
2020-10-02
·
تاريخ التحديث
2020-10-08
الوصف من
CVSS 3.1
8.1
عاليةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions
WAVLINK WN530H4 M30H4.V5030.190403
Description
The issue allows an attacker to remotely access router endpoints due to the lack of CSRF tokens in the /cgi-bin/ directory. This can be exploited if a user is authenticated in the router portal.
Recommendations
For WAVLINK WN530H4 M30H4.V5030.190403, consider restricting access to the /cgi-bin/ directory until a patch is available. As a temporary workaround, avoid using the router portal when connected to untrusted networks to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾