CVE-2020-36908

Name of the Vulnerable Software and Affected Versions SnapGear Management Console version 3.1.5

Description The SnapGear Management Console contains a cross-site request forgery condition. An attacker can leverage this to perform administrative actions without the user’s knowledge or consent. Specifically, an attacker can create a malicious web page that, when visited by a logged-in user, automatically submits a form to create a new super user account with full administrative privileges. The vulnerable functionality involves the creation of a super user account.

Recommendations Apply updates to address the cross-site request forgery condition in version 3.1.5.