CVE-2024-26153

Katalog CVE

CVSS 7.4 · High EPSS 0,18%

Kerentanan Cross-Site Request Forgery (CSRF) pada etictelecom remote access server firmware. Skor CVSS 3.1 7.4 (High) menurut hq.dhs.gov.

Deskripsi (NVD)

All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.9.19 are vulnerable to cross-site request forgery (CSRF). An external attacker with no access to the device can force the end user into submitting a "setconf" method request, not requiring any CSRF token, which can lead into denial of service on the device.

Rincian

Terbit di NVD

17 Januari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.4 (High), sumber hq.dhs.gov
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-352: Cross-Site Request Forgery (CSRF)

EPSS (30 hari)

0,18% peluang dieksploitasi; lebih tinggi dari 6,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.cisa.gov/news-events/ics-advisories/icsa-22-307-01 advisory pihak ketiga · pemerintah AS