CVE-2020-27692

The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains multiple CSRF vulnerabilities within its web management portal

published November 4, 2020

CVSS
—
EPSS
1%
Percentile
45.1
In the wild
Unconfirmed
What it is

The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains multiple CSRF vulnerabilities within its web management portal. Attackers can, for example, use this to update the TR-069 configuration server settings (responsible for managing devices remotely). This makes it possible to remotely reboot the device or upload malicious firmware.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00548 · 45.1th percentile
Published
2020-11-04T20:14Z
EPSS history
Timeline
  • 04 NOV 20:14Z
    The Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains multiple CSRF vulnerabilities within its web management portal
    cvelistv5