CVE-2020-24033

An issue was discovered in fs.com S3900 24T4S 1.7.0 and earlier

published October 22, 2020

CVSS
—
EPSS
1%
Percentile
61.6
In the wild
Unconfirmed
What it is

An issue was discovered in fs.com S3900 24T4S 1.7.0 and earlier. The form does not have an authentication or token authentication mechanism that allows remote attackers to forge requests on behalf of a site administrator to change all settings including deleting users, creating new users with escalated privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00971 · 61.6th percentile
Published
2020-10-22T13:53Z
EPSS history
Timeline
  • 22 OCT 13:53Z
    An issue was discovered in fs.com S3900 24T4S 1.7.0 and earlier
    cvelistv5