PT-2017-8552 · Lg · L-04D

Atsuo Sakurai · Publicado 2017-05-22 · Atualizado 2017-05-31 · CVE-2016-4854

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions L-04D firmware versions V10a through V10b

Description A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of administrators, enabling them to perform arbitrary operations. The exact vectors used for exploitation are not specified.

Recommendations For L-04D firmware versions V10a and V10b, consider implementing additional authentication checks to prevent CSRF attacks, such as token-based validation, until a patched version is available.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2016-4854

Produtos afetados

L-04D

Referências · 5

• https://osv.dev/vulnerability/CVE-2016-4854 · Aviso do Fabricante
• http://securityfocus.com/bid/93278 · Nota
• https://jvn.jp/en/jp/JVN46351856/index.html · Nota
• http://jvndb.jvn.jp/jvndb/JVNDB-2016-000194 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-4854 · Nota de Segurança