CVE-2020-23587

2022-11-2300:00:00

mitre

www.cve.org

optilink

csrf attack

men in the middle

remote attacker

firmware vulnerability

4.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.1%

JSON

A vulnerability found in the OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to men in the middle attack by adding New Routes in RoutingConfiguration on " /routing.asp ".

References

github.com/huzaifahussain98/CVE-2020-23587