PT-2021-11735
CVE-2020-35223
·
تاريخ النشر
2021-03-08
·
تاريخ التحديث
2021-03-15
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43
Description:
The issue concerns the CSRF protection mechanism in the web administration panel, which can be bypassed by omitting the CSRF token parameter in HTTP requests.
Recommendations:
For NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43, consider restricting access to the web administration panel until a fix is available, and avoid omitting the CSRF token parameter in HTTP requests to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾