PT-2018-14236

CVE-2018-17869

·

Published

2018-10-01

·

Updated

2018-11-27

Description by

CVSS 2.0
6.8
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions DASAN H660GW (affected versions not specified)
Description The issue is related to the lack of CSRF protection mechanism. This means that the device does not have a mechanism in place to prevent cross-site request forgery attacks.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-352: Cross-Site Request Forgery (CSRF)
Related identifiers
CVE-2018-17869
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com