Skip to content

CVE-2018-13032 ECESSA ShieldLink SL175EHQ 10.7.4 devices have CSRF to add superuser accounts via the cgi-bin/pl_web.cgi/util_configlogin_act URI.

HighCVSS 8.8 EPSS 2.2% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

ECESSA ShieldLink SL175EHQ 10.7.4 devices have CSRF to add superuser accounts via the cgi-bin/pl_web.cgi/util_configlogin_act URI.

Affected products

ProductAffected versionsFixed in
ecessa shieldlink sl175ehq firmware = 10.7.4 No fix listed

References

  • 44938 exploit third-party-advisory vdb-entry