Lucene search
HistoryNov 23, 2022 - 2:15 a.m.
CVE-2020-23586
cve-2020-23586
optilink op-xt71000n
csrf
network traffic control
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
31.9%
A vulnerability found in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to Add Network Traffic Control Type Rule.
Affected configurations
Node
optilinknetworkop-xt71000n_firmwareMatch3.3.1-191028
optilinknetworkop-xt71000nMatch2.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| optilinknetwork | op-xt71000n_firmware | 3.3.1-191028 | cpe:2.3:o:optilinknetwork:op-xt71000n_firmware:3.3.1-191028:*:*:*:*:*:*:* |
| optilinknetwork | op-xt71000n | 2.2 | cpe:2.3:h:optilinknetwork:op-xt71000n:2.2:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2020-23586
2022-11-23 00:00:00
cve
cve
CVE-2020-23586
2022-11-23 02:15:09
prion
prion
Cross site request forgery (csrf)
2022-11-23 02:15:00
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
31.9%
Related for NVD:CVE-2020-23586