Cross-Site Request Forgery (CSRF) Vulnerability in Unibox SMB 2.4, UniBox Enterprise Series 2.4, and UniBox Campus Series 2.4

Cross-Site Request Forgery (CSRF) Vulnerability in Unibox SMB 2.4, UniBox Enterprise Series 2.4, and UniBox Campus Series 2.4

CVE-2020-21884 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Unibox SMB 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a cross-site request forgery (CSRF) vulnerability in /tools/network-trace, /list_users, /list_byod?usertype=raduser, /dhcp_leases, /go?rid=202 in which a specially crafted HTTP request may reconfigure the device.

Learn more about our Network Penetration Testing.