Lucene search
PRIOn knowledge basePRION:CVE-2017-7917HistoryMay 29, 2017 - 4:29 p.m.
Cross site request forgery (csrf)
2017-05-2916:29:00
PRIOn knowledge base
www.prio-n.com
2
A Cross-Site Request Forgery issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions, OnCell 5104-HSDPA, OnCell 5104-HSPA, and OnCell 5004-HSPA. The application does not sufficiently verify if a request was intentionally provided by the user who submitted the request, which could allow an attacker to modify the configuration of the device.
| CPE | Name | Operator | Version |
|---|---|---|---|
| oncell_g3110-hsdpa_firmware | le | 1.2 | |
| oncell_g3110-hspa_firmware | le | 1.3 | |
| oncell_g3150-hsdpa_firmware | le | 1.4 |
Related
cve
cve
CVE-2017-7917
2017-05-29 16:29:00
cvelist
cvelist
CVE-2017-7917
2017-05-29 16:00:00
nvd
nvd
CVE-2017-7917
2017-05-29 16:29:00
ics
ics
Moxa OnCell
2017-05-23 12:00:00