Lucene search
+L

6 matches found

NVD
NVD
•added 2021/02/12 7:15 a.m.•39 views

CVE-2021-20650

Cross-site request forgery CSRF vulnerability in ELECOM NCC-EWF100RMWH2 allows remote attackers to hijack the authentication of administrators and execute an arbitrary request via unspecified vector. As a result, the device settings may be altered and/or telnet daemon may be started...

6.5CVSS0.00515EPSS
SaveExploits0References2
Prion
Prion
•added 2021/02/12 7:15 a.m.•35 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in ELECOM NCC-EWF100RMWH2 allows remote attackers to hijack the authentication of administrators and execute an arbitrary request via unspecified vector. As a result, the device settings may be altered and/or telnet daemon may be started...

4.3CVSS7.1AI score0.00515EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/02/12 6:15 a.m.•50 views

CVE-2021-20650

Cross-site request forgery CSRF vulnerability in ELECOM NCC-EWF100RMWH2 allows remote attackers to hijack the authentication of administrators and execute an arbitrary request via unspecified vector. As a result, the device settings may be altered and/or telnet daemon may be started...

7.3AI score0.00515EPSS
SaveExploits0References2
CVE
CVE
•added 2021/02/12 6:15 a.m.•96 views

CVE-2021-20650

CVE-2021-20650 is a cross-site request forgery (CSRF) vulnerability affecting ELECOM NCC-EWF100RMWH2. The issue allows an attacker to hijack an administrator’s session and issue an arbitrary request, potentially altering device settings and enabling the telnet daemon via an unspecified vector. Pu...

6.5CVSS7AI score0.00515EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/12 12:00 a.m.•8 views

CVE-2021-20650: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in ELECOM NCC-EWF100RMWH2 allows remote attackers to hijack the authentication of administrators and execute an arbitrary request via unspecified vector. As a result, the device settings may be altered and/or telnet daemon may be started...

6.5CVSS6.2AI score0.00515EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/02/12 12:00 a.m.•5 views

PT-2021-14111

Name of the Vulnerable Software and Affected Versions: ELECOM NCC-EWF100RMWH2 affected versions not specified Description: A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators and execute an arbitrary request via an unspecified vector. Thi...

6.5CVSS6.1AI score0.00515EPSS
SaveExploits0References4
Rows per page
Query Builder