CVE-2021-30147

Name of the Vulnerable Software and Affected Versions DMA Softlab Radius Manager version 4.4.0

Description The issue allows for Cross-Site Request Forgery (CSRF) attacks, which can lead to impacts such as adding new manager accounts via the admin.php endpoint. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited.

Recommendations For DMA Softlab Radius Manager version 4.4.0, consider disabling access to the admin.php endpoint until a fix is available to prevent CSRF attacks. As a temporary workaround, restrict the ability to add new manager accounts to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.