CVE-2019-14526

An issue was discovered on NETGEAR Nighthawk M1 (MR1100) devices before 12.06.03

published August 14, 2019

CVSS
—
EPSS
1%
Percentile
52.2
In the wild
Unconfirmed
What it is

An issue was discovered on NETGEAR Nighthawk M1 (MR1100) devices before 12.06.03. The web-interface Cross-Site Request Forgery token is stored in a dynamically generated JavaScript file, and therefore can be embedded in third party pages, and re-used against the Nighthawk web interface. This entirely bypasses the intended security benefits of the use of a CSRF-protection token.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00689 · 52.2th percentile
Published
2019-08-14T20:50Z
EPSS history
Timeline
  • 14 AUG 20:50Z
    An issue was discovered on NETGEAR Nighthawk M1 (MR1100) devices before 12.06.03
    cvelistv5