CVE-2020-15043

Katalog CVE

CVSS 6.5 · Medium EPSS 0,45%

Kerentanan Cross-Site Request Forgery (CSRF) pada iball wrb303n firmware. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

iBall WRB303N devices allow CSRF attacks, as demonstrated by enabling remote management, enabling DHCP, or modifying the subnet range for IP addresses.

Rincian

Terbit di NVD

29 Juni 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-352: Cross-Site Request Forgery (CSRF)

EPSS (30 hari)

0,45% peluang dieksploitasi; lebih tinggi dari 37,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gist.github.com/Saket-taneja/4dda4b2df5aa0973a7160bb6bf8875e0 exploit · advisory pihak ketiga
• https://github.com/Saket-taneja/IballCSRFExploit advisory pihak ketiga