PT-2020-18524

Name of the Vulnerable Software and Affected Versions EasyBlocks IPv6 versions 2.0.1 and earlier EasyBlocks Enterprise versions 2.0.1 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators via unspecified vectors. Thi...

JVN#89224521: Multiple vulnerabilities in EasyBlocks IPv6

EasyBlocks IPv6 provided by Plat'Home Co., Ltd. contains multiple vulnerabilities listed below. Cross site request forgeryCWE-352 - CVE-2020-5549 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N| Base Score: 4.3 CVSS v2| AV:N/AC:H/Au:N/C:N/I:P/A:N| Base...

PT-2020-18525

Name of the Vulnerable Software and Affected Versions EasyBlocks IPv6 versions 2.0.1 and earlier EasyBlocks Enterprise versions 2.0.1 and earlier Description The issue allows remote attackers to impersonate a registered user and log in to the management console, potentially resulting in informati...

CVE-2020-5550: Session Fixation

Session fixation vulnerability in EasyBlocks IPv6 Ver. 2.0.1 and earlier, and Enterprise Ver. 2.0.1 and earlier allows remote attackers to impersonate a registered user and log in the management console, that may result in information alteration/disclosure via unspecified vectors...