CVE-2018-19525

CVE-2018-19525 affects Systrome ISG-600C, ISG-600H, and ISG-800W devices running 1.1-R2.1_TRUNK-20180914.bin. Described as a CSRF vulnerability due to missing CSRF token validation on endpoints /ui/?g=obj_keywords_add and /ui/?g=obj_keywords_addsave, resulting in XSS. The connected Red Hat/NVD/PR...

CVE-2018-19525

creationtimestamp| type| source ---|---|--- 2019-02-13 14:39:58+00:00| seen| MISP/5c642be4-a6b8-459c-8e3e-6e5b0a021402...

SYSTORME ISG Cross Site Request Forgery Vulnerability

Exploit for multiple platform in category web applications SYSTORME ISG Cross Site Request Forgery Vulnerability ===================================================== Authenticated XSRF leads to complete Account Takeover ===================================================== . contents:: Table Of...