CVE-2026-27518 in 10G08-0800GSM Network Switch
Summary
by MITRE • 02/24/2026
Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior lack CSRF protections for state-changing actions in the administrative interface. An attacker can trick an authenticated administrator into performing unauthorized configuration changes.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Analysis
by VulDB Data Team • 02/24/2026
The vulnerability identified as CVE-2026-27518 affects the Binardat 10G08-0800GSM network switch firmware versions V300SP10260209 and earlier, representing a critical security flaw that undermines the integrity of administrative operations within network infrastructure. This issue stems from the absence of Cross-Site Request Forgery (CSRF) protections in the web-based management interface, creating a significant attack surface that can be exploited by malicious actors seeking unauthorized access to network configuration controls. The affected device operates as a 10 gigabit network switch designed for enterprise and industrial environments, where administrative privileges are essential for maintaining network security and operational continuity.
The technical implementation flaw resides in the web interface's failure to validate the origin of administrative requests, specifically when performing state-changing actions such as modifying network configurations, updating user credentials, or altering security policies. This vulnerability manifests when an authenticated administrator visits a malicious website or clicks on a compromised link that contains embedded requests to the switch's administrative interface. Without proper CSRF tokens or origin validation mechanisms, the switch processes these requests as legitimate administrative commands, effectively allowing attackers to execute unauthorized configuration changes without proper authentication or authorization. The flaw operates at the application layer of the network stack, exploiting the trust relationship between the web interface and the underlying network switch firmware.
The operational impact of this vulnerability extends beyond simple configuration changes, potentially compromising entire network infrastructures through cascading security failures. An attacker could leverage this vulnerability to disable security features, create backdoor accounts, modify firewall rules, or redirect network traffic to malicious endpoints. The consequences could include unauthorized network access, data exfiltration, service disruption, or complete network compromise, particularly in environments where these switches serve as critical network gateways or core infrastructure components. The vulnerability affects organizations that rely on the Binardat switch for network segmentation, access control, and traffic management, making it a significant threat to network security posture and compliance requirements.
Organizations should immediately implement mitigations including firmware updates from the vendor to address the CSRF vulnerability, deployment of network segmentation controls to limit access to administrative interfaces, and implementation of multi-factor authentication for administrative access. The vulnerability aligns with CWE-352, which specifically addresses Cross-Site Request Forgery, and represents a critical weakness in the web application security model of the device. From an ATT&CK framework perspective, this vulnerability maps to techniques involving privilege escalation and persistence through configuration changes, potentially enabling adversaries to establish long-term network access and control. Additionally, security professionals should consider implementing web application firewalls and monitoring for suspicious administrative activities to detect potential exploitation attempts and maintain network integrity.