Lucene search
HistoryNov 23, 2022 - 2:15 a.m.
CVE-2020-23590
cve-2020-23590
optilink op-xt71000n
csrf
cross-site request forgery
wlan ssid
wlwpa.asp
firmware vulnerability
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
32.2%
A vulnerability in Optilink OP-XT71000N Hardware version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated remote attacker to conduct a cross-site request forgery (CSRF) attack to change the Password for “WLAN SSID” through “wlwpa.asp”.
Affected configurations
Node
optilinknetworkop-xt71000nMatch2.2
optilinknetworkop-xt71000n_firmwareMatch3.3.1-191028
| Vendor | Product | Version | CPE |
|---|---|---|---|
| optilinknetwork | op-xt71000n_firmware | 3.3.1-191028 | cpe:/o:optilinknetwork:op-xt71000n_firmware:3.3.1-191028::: |
Social References
More
Related
nvd
nvd
CVE-2020-23590
2022-11-23 02:15:09
cvelist
cvelist
CVE-2020-23590
2022-11-23 00:00:00
prion
prion
Cross site request forgery (csrf)
2022-11-23 02:15:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
32.2%
Related for CVE-2020-23590