CVE-2020-10181
🗓️ 11 Mar 2020 15:26:04Reported by mitreType 
cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 1112 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 19 |
|---|---|---|---|---|
 | Enhanced Multimedia Router 3.0.4.27 Cross Site Request Forgery Vulnerability | 17 Mar 202000:00 | – | zdt |
 | CVE-2020-10181 | 11 Mar 202000:00 | – | attackerkb |
 | Sumavision Enhanced Multimedia Router Arbitrary User Privilege Escalation | 4 Jan 202200:00 | – | bdu_fstec |
 | CVE-2020-10181 | 8 Nov 202108:58 | – | circl |
 | Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability | 3 Nov 202100:00 | – | cisa_kev |
 | Sumavision Enhanced Multimedia Router Cross-Site Request Forgery Vulnerability | 12 Mar 202000:00 | – | cnvd |
 | Sumavision Enhanced Multimedia Router Cross Site Request Forgery (CVE-2020-10181) | 16 Nov 202100:00 | – | checkpoint_advisories |
 | CVE-2020-10181 | 11 Mar 202015:26 | – | cvelist |
 | Enhanced Multimedia Router 3.0.4.27 - Cross-Site Request Forgery (Add Admin) | 16 Mar 202000:00 | – | exploitdb |
 | Enhanced Multimedia Router 3.0.4.27 - Cross-Site Request Forgery (Add Admin) | 16 Mar 202000:00 | – | exploitpack |
10
Node
AND
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| type | request body | /goform/formEMR30 | Cross-Site Request Forgery (CSRF) vulnerability in the formEMR30 endpoint allowing the creation of arbitrary users with administrator privileges via the setString parameter. | CWE-352 |
| cmd | request body | /goform/formEMR30 | Cross-Site Request Forgery (CSRF) vulnerability in the formEMR30 endpoint allowing the creation of arbitrary users with administrator privileges via the setString parameter. | CWE-352 |
| language | request body | /goform/formEMR30 | Cross-Site Request Forgery (CSRF) vulnerability in the formEMR30 endpoint allowing the creation of arbitrary users with administrator privileges via the setString parameter. | CWE-352 |
| slotNo | request body | /goform/formEMR30 | Cross-Site Request Forgery (CSRF) vulnerability in the formEMR30 endpoint allowing the creation of arbitrary users with administrator privileges via the setString parameter. | CWE-352 |
| setString | request body | /goform/formEMR30 | Cross-Site Request Forgery (CSRF) vulnerability in the formEMR30 endpoint allowing the creation of arbitrary users with administrator privileges via the setString parameter. | CWE-352 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 02:47Current
9.3Critical risk
Vulners AI Score9.3
CVSS 27.5
CVSS 3.19.8
EPSS0.14938
SSVC