CVE-2018-25150

CVE-2018-25150 affects Ecessa ShieldLink SL175EHQ, version 10.7.4. The flaw is a cross-site request forgery that lets an attacker create an administrative user without authentication by luring a logged-in admin to load a crafted page (hidden form). Public references in connected documents corrobo...