CVE-2020-24034

creationtimestamp| type| source ---|---|--- 2022-07-04 14:39:14+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1683...

CVE-2020-24034

CVE-2020-24034 affects Sagemcom F@ST 5280 routers running firmware version 1.150.61. The issue is an insecure deserialization in the authenticated flow that lets a logged-in user alter a serialized session cookie (sess_id, nonce, ha1) to assume another user’s role, including an internal account w...