Security Advisory

CVE-2020-7503

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-06-16 19:42:10
Last updated 2024-08-04 09:33:19
Assigner schneider
State PUBLISHED

Description

A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to execute malicious commands on behalf of a legitimate user when xsrf-token data is intercepted.