CVE-2018-13032

ECESSA ShieldLink SL175EHQ 10.7.4 devices have CSRF to add superuser accounts via the cgi-bin/pl_web.cgi/util_configlogin_act URI.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2018-07-01

Last modified

2024-08-05

Weaknesses

CWE-352

Affected products

• Shieldlink Sl175ehq Firmware (Ecessa)

References

• https://www.exploit-db.com/exploits/44938/