Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ETIC Telecom Remote Access Server (RAS) Cross-Site Request Forgery
Vulnerability Description
All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.9.19 are vulnerable to cross-site request forgery (CSRF). An external attacker with no access to the device can force the end user into submitting a "setconf" method request, not requiring any CSRF token, which can lead into denial of service on the device.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H
Vulnerability Type
跨站请求伪造(CSRF)
Vulnerability Title
ETIC Telecom Remote Access Server 跨站请求伪造漏洞
Vulnerability Description
ETIC Telecom Remote Access Server是法国ETIC Telecom公司的一种远程维护解决方案。旨在使制造商远程即可维护自动化设备。 ETIC Telecom Remote Access Server 4.9.19之前版本存在跨站请求伪造漏洞，该漏洞源于容易受到跨站请求伪造(CSRF)攻击，可能导致设备拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A