CVE-2017-6038 in GECKO Lite Managed Switch

الملخص

بحسب MITRE

A Cross-Site Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. The web application does not sufficiently verify that requests were provided by the user who submitted the request.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• حجز: 16/02/2017
• إفشاء: 29/06/2017
• الاعتدال: تمت الموافقة
• إدخال: VDB-102948
• CPE: جاهز
• CWE: CWE-352 (مؤكد)
• CVSS: 7.1 (NVD)
• EPSS: 0.00077
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-6038
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-6038
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-6038/