PT-2026-93190 · Netcore · Nr255-V
CVSS v3.1
8.1
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Netcore NR255-V version 1.5.130703
Description
Cross-site request forgery occurs when an attacker tricks a user's browser into performing an unwanted action on a different website where the user is authenticated. This issue affects the 'wan config set cgi', 'wan num set cgi', and 'lan ip change cgi' endpoints, allowing attackers to craft forged requests that trick authenticated administrators into modifying WAN or LAN network configuration settings without consent.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Nr255-V