Lucene search

K
cvelistMitreCVELIST:CVE-2022-45724
HistoryFeb 13, 2023 - 12:00 a.m.

CVE-2022-45724

2023-02-1300:00:00
mitre
www.cve.org
5
cve-2022-45724
comfast router
access control
vulnerability
remote attacker
http request
unauthenticated page
session_id

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

52.1%

Incorrect Access Control in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the same network to perform any HTTP request to an unauthenticated page to force the server to generate a SESSION_ID, and using this SESSION_ID an attacker can then perform authenticated requests.

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

52.1%

Related for CVELIST:CVE-2022-45724