CVE-2018-13032

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Ecessa ShieldLink SL175EHQ < 10.7.4 - Cross-Site Request Forgery (Add Superuser)2018-06-25 · webapps · hardware

Impact

ECESSA ShieldLink SL175EHQ 10.7.4 devices have CSRF to add superuser accounts via the cgi-bin/pl_web.cgi/util_configlogin_act URI.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://www.exploit-db.com/exploits/44938/
• https://www.exploit-db.com/exploits/44938/