CVE-2020-7503CWE-352

A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to execute…

published June 16, 2020

CVSS
—
EPSS
1%
Percentile
45.4
In the wild
Unconfirmed
What it is

A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to execute malicious commands on behalf of a legitimate user when xsrf-token data is intercepted.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00553 · 45.4th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2020-06-16T19:42Z
EPSS history
Timeline
  • 16 JUN 19:42Z
    A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to execute…
    cvelistv5