CVE-2017-6180

Name of the Vulnerable Software and Affected Versions Keekoon KK002 devices version 1.8.12 HD

Description The issue affects the Keekoon KK002 devices, where a Cross Site Request Forgery vulnerability is present. This vulnerability impacts various pages, including the "goform/formChnUserPwd" and "goform/formUserMng" API endpoints.

Recommendations For Keekoon KK002 devices version 1.8.12 HD, as a temporary workaround, consider restricting access to the vulnerable API endpoints "goform/formChnUserPwd" and "goform/formUserMng" until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.