Lucene search
HistoryNov 23, 2022 - 2:15 a.m.
CVE-2020-23590
vulnerability
csrf
optilink op-xt71000n
hardware
unauthenticated
remote attackers
wlan ssid password
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
32.2%
A vulnerability in Optilink OP-XT71000N Hardware version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated remote attacker to conduct a cross-site request forgery (CSRF) attack to change the Password for “WLAN SSID” through “wlwpa.asp”.
Affected configurations
Node
optilinknetworkop-xt71000nMatch2.2
optilinknetworkop-xt71000n_firmwareMatch3.3.1-191028
Related
cvelist
cvelist
CVE-2020-23590
2022-11-23 00:00:00
cve
cve
CVE-2020-23590
2022-11-23 02:15:09
prion
prion
Cross site request forgery (csrf)
2022-11-23 02:15:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
32.2%
Related for NVD:CVE-2020-23590