CVE-2017-8836 in Balanceinfo

Zusammenfassung

von MITRE

CSRF exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. The CGI scripts in the administrative interface are affected. This allows an attacker to execute commands, if a logged in user visits a malicious website. This can for example be used to change the credentials of the administrative webinterface.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservieren

08.05.2017

Veröffentlichung

05.06.2017

Moderieren

akzeptiert

Eintrag

VDB-101958

CPE

bereit

Exploit

Download

EPSS

0.00595

KEV

nein

Aktivitäten

very low

Quellen

Do you know our Splunk app?

Download it now for free!