CVE-2017-8836
—CVSS 3.0
8.8 high
EPSS
2%p78
Published
()
Modified
Description
CSRF exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. The CGI scripts in the administrative interface are affected. This allows an attacker to execute commands, if a logged in user visits a malicious website. This can for example be used to change the credentials of the administrative webinterface.
- Vendors
- peplink
- Products
- b305hw2 firmware, 380hw6 firmware, 580hw2 firmware, 710hw3 firmware, 1350hw2 firmware, 2500 firmware
- Weakness
- CWE-352
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.