Lucene search

[email protected]CVE-2020-23590

HistoryNov 23, 2022 - 2:15 a.m.

CVE-2020-23590

2022-11-2302:15:00

CWE-352

[email protected]

web.nvd.nist.gov

cve-2020-23590

optilink op-xt71000n

csrf

cross-site request forgery

wlan ssid

wlwpa.asp

firmware vulnerability

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

7.6 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

29.5%

JSON

A vulnerability in Optilink OP-XT71000N Hardware version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated remote attacker to conduct a cross-site request forgery (CSRF) attack to change the Password for “WLAN SSID” through “wlwpa.asp”.

CPENameOperatorVersion
optilinknetwork:op-xt71000n_firmwareoptilinknetwork op-xt71000n firmwareeq3.3.1-191028

CPE	Name	Operator	Version
optilinknetwork:op-xt71000n_firmware	optilinknetwork op-xt71000n firmware	eq	3.3.1-191028

References

github.com/huzaifahussain98/CVE-2020-23590

Social References

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

7.6 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

29.5%

JSON

Related for CVE-2020-23590

prion1