CVE-2016-10316

Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to conduct Open Redirect attacks via the return-url parameter to /goform/formLogout.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2017-04-03

Last modified

2024-09-16

Weaknesses

CWE-601

Affected products

• Al3g Firmware (Jensenofscandinavia)
• Al5000ac Firmware (Jensenofscandinavia)
• Al59300 Firmware (Jensenofscandinavia)

References

• https://www.riskbasedsecurity.com/research/RBS-2016-004.pdf