CVE-2020-23588

Name of the Vulnerable Software and Affected Versions OPTILINK OP-XT71000N Hardware Version: V2.2, Firmware Version: OP V3.3.1-191028

Description A vulnerability allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to enable or disable ports and to change port numbers through the "/rmtacc.asp" API endpoint.

Recommendations For OPTILINK OP-XT71000N Hardware Version: V2.2, Firmware Version: OP V3.3.1-191028, as a temporary workaround, consider restricting access to the "/rmtacc.asp" API endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.