8.8
CVE-2020-13620
- EPSS 0.54%
- Veröffentlicht 24.11.2020 18:15:11
- Zuletzt bearbeitet 21.11.2024 05:01:36
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginFastweb FASTGate GPON FGA2130FWB devices through 2020-05-26 allow CSRF via the router administration web panel, leading to an attacker's ability to perform administrative actions such as modifying the configuration.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Fastweb ≫ Fastgate Gpon Fga2130fwb Firmware Version <= 2020-05-26
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.54% | 0.412 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
CWE-352 Cross-Site Request Forgery (CSRF)
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.
https://lucadidomenico.medium.com/fastgate-gpon-cross-site-request-forgery-cve-2020-13620-e279f3fbaee4
https://members.backbox.org/fastgate-gpon-cross-site-request-forgery/