Description (CNA)
A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to execute malicious commands on behalf of a legitimate user when xsrf-token data is intercepted.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Easergy T300 (Firmware version 1.5.2 and older) | affected Easergy T300 (Firmware version 1.5.2 and older) |
CWE
CWE-352
References
ADP enrichment
No English description supplied.