CVE-2020-21884

2021-04-0912:19:18

mitre

www.cve.org

unibox

csrf

vulnerability

http request

reconfiguration

endpoints

AI Score

8.8

Confidence

High

EPSS

0.203

Percentile

96.4%

JSON

Unibox SMB 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a cross-site request forgery (CSRF) vulnerability in /tools/network-trace, /list_users, /list_byod?usertype=raduser, /dhcp_leases, /go?rid=202 in which a specially crafted HTTP request may reconfigure the device.