Cross site request forgery (csrf)

2014-10-2016:55:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.5%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in Huawei HiLink E3236 before E3276sTCPU-V200R002B470D13SP00C00 and E3276sWebUI-V100R007B100D03SP01C03 and E3276 before E3236sTCPU-V200R002B146D41SP00C00 and E3236sWebUI-V100R007B100D03SP01C03 allow remote attackers to hijack the authentication of administrators for requests that (1) change configuration settings or (2) use device functions.

CPENameOperatorVersion
e3236_firmwareeqe3236s2tcpu22.146.29.0.0
e3236_firmwareeqwebui-13.100.10.0.3
e3276_firmwareeqe3276s150tcpu22.265.3.0.0
e3276_firmwareeqwebui-13.100.9.0.3

Name	Operator	Version
e3236_firmware	eq	e3236s2tcpu22.146.29.0.0
e3236_firmware	eq	webui-13.100.10.0.3
e3276_firmware	eq	e3276s150tcpu22.265.3.0.0
e3276_firmware	eq	webui-13.100.9.0.3