CVE-2020-10181

Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability

Enhanced Multimedia Router Firmware

goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of arbitrary users with elevated privileges (administrator) on a device, as demonstrated by a setString=new_user administrator 123456 request.

11. Mär 2020

Ausgewertete Quellen

• Hinweis
  http://packetstormsecurity.com/files/156746/Enhanced-Multimedia-Router-3.0.4.27-Cross-Site-Request-Forgery.html
• Hinweis
  https://www.youtube.com/watch?v=Ufcj4D9eA5o
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-10181
• CISA
  Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability
• NVD
  CVE-2020-10181
• GitHub
  https://github.com/s1kr10s/Sumavision_EMR3.0