CVE-2023-24048

—

CVSS 3.1

8.8 high

EPSS

<1%p28

Published

Dec 4, 2023 (Dec 4, 2023)

Modified

Jun 17, 2026

Description

Cross Site Request Forgery (CSRF) vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via crafted GET request to /man_password.htm.

Vendors: connectize
Products: ac21000 g6 firmware
Weakness: CWE-352
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.