CVE-2024-26153

creationtimestamp| type| source ---|---|--- 2025-01-17 16:56:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2158 2025-01-17 17:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxcbp3fk72r 2025-01-17 18:39:39+00:00| seen|...

CVE-2024-26153 ETIC Telecom Remote Access Server (RAS) Cross-Site Request Forgery

All versions of ETIC Telecom Remote Access Server RAS prior to 4.9.19 are vulnerable to cross-site request forgery CSRF. An external attacker with no access to the device can force the end user into submitting a "setconf" method request, not requiring any CSRF token, which can lead into denial of...

CVE-2024-26153 ETIC Telecom Remote Access Server (RAS) Cross-Site Request Forgery

All versions of ETIC Telecom Remote Access Server RAS prior to 4.9.19 are vulnerable to cross-site request forgery CSRF. An external attacker with no access to the device can force the end user into submitting a "setconf" method request, not requiring any CSRF token, which can lead into denial of...

CVE-2024-26153

CVE-2024-26153 affects ETIC Telecom Remote Access Server (RAS) versions prior to 4.9.19. The issue is a CSRF flaw in the web portal that allows an external attacker with no device access to coerce an end user into submitting a setconf request without a CSRF token, potentially causing device denia...