Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2023-24048
HistoryDec 04, 2023 - 12:00 a.m.

CVE-2023-24048

2023-12-0400:00:00
mitre
github.com
2
cve-2023-24048
cross site request forgery
connectize ac21000
man_password.htm

AI Score

7.3

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

Cross Site Request Forgery (CSRF) vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via crafted GET request to /man_password.htm.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:connectize:ac21000_g6_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "connectize",
    "product": "ac21000_g6_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "641.139.1.1256"
      }
    ],
    "defaultStatus": "unknown"
  }
]

AI Score

7.3

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

Related for VULNRICHMENT:CVE-2023-24048