CVE-2020-37096

Edimax EW-7438RPn - Cross-Site Request Forgery (MAC Filtering)

CVSS 5.1 MEDIUMEPSS 0.1%CWE-352

Edimax EW-7438RPn 1.13 contains a cross-site request forgery vulnerability in the MAC filtering configuration interface. Attackers can craft malicious web pages to trick users into adding unauthorized MAC addresses to the device's filtering rules without their consent.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Produtos afetados

EDIMAX Technology Co., Ltd. · EW-7438RPn Mini

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://www.edimax.com/edimax/merchandise/merchandise_detail/data/edimax/global/wi-fi_range_extenders_n300/ew-7438rpn_mini/https://www.exploit-db.com/exploits/48366 https://www.vulncheck.com/advisories/edimax-ew-rpn-cross-site-request-forgery-mac-filtering