CVE-2017-16565

Cross-Site Request Forgery (CSRF) in /cgi-bin/login on Vonage (Grandstream) HT802 devices allows attackers to authenticate a user via the login screen using…

published November 6, 2017

CVSS
—
EPSS
0%
Percentile
41.5
In the wild
Unconfirmed
What it is

Cross-Site Request Forgery (CSRF) in /cgi-bin/login on Vonage (Grandstream) HT802 devices allows attackers to authenticate a user via the login screen using the default password of 123 and submit arbitrary requests.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00494 · 41.5th percentile
Published
2017-11-06T08:00Z
EPSS history
Timeline
  • 06 NOV 08:00Z
    Cross-Site Request Forgery (CSRF) in /cgi-bin/login on Vonage (Grandstream) HT802 devices allows attackers to authenticate a user via the login screen using…
    cvelistv5