Cross site request forgery (csrf)

2020-12-1420:15:00

PRIOn knowledge base

www.prio-n.com

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.6%

JSON

A security issue was found in EdgePower 24V/54V firmware v1.7.0 and earlier where, due to missing CSRF protections, an attacker would have been able to perform unauthorized remote code execution.

CPENameOperatorVersion
edgemax_edgepower_24v_firmwarele1.7.0
edgemax_edgepower_54v_firmwarele1.7.0

CPE	Name	Operator	Version
	edgemax_edgepower_24v_firmware	le	1.7.0
	edgemax_edgepower_54v_firmware	le	1.7.0

References

community.ui.com/releases/Security-advisory-bulletin-016-016/40c1d33d-785e-44d5-8e6c-56a8addef1bc