Cross site request forgery (csrf)

2022-06-1615:15:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.8%

JSON

Xiaomi Lamp 1 v2.0.4_0066 was discovered to be vulnerable to replay attacks. This allows attackers to to bypass the expected access restrictions and gain control of the switch and other functions via a crafted POST request.

CPENameOperatorVersion
xiaomi_lamp_1_firmwareeq2.0.4-66

CPE	Name	Operator	Version
	xiaomi_lamp_1_firmware	eq	2.0.4-66

References

github.com/skyedai910/Vuln/tree/master/xiaomi_lamp_1/replay_attack_0