Hsw69

**Name of the Vulnerable Software and Affected Versions** Keekoon KK002 devices version 1.8.12 HD **Description** The issue affects the Keekoon KK002 devices, where a Cross Site Request Forgery vulnerability is present. This vulnerability impacts various pages, including the "goform/formChnUserPwd" and "goform/formUserMng" API endpoints. **Recommendations** For Keekoon KK002 devices version 1.8.12 HD, as a temporary workaround, consider restricting access to the vulnerable API endpoints "goform/formChnUserPwd" and "goform/formUserMng" until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.