CVE-2011-4837 in HomeSeer HS2

Riassunto

di MITRE

Cross-site request forgery (CSRF) vulnerability in /ctrl in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to hijack the authentication of admins for requests that execute arbitrary programs.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 14/12/2011
• Divulgazione: 14/12/2011
• Moderazione: accettato
• Voce: VDB-59704
• CPE: pronto
• CWE: CWE-352 (confermato)
• Sfruttamento: Scaricare
• CVSS: 6.8 (NVD)
• EPSS: 0.02073
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-4837
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-4837
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-4837/