CVEvulnerability
CVE-2020-5549
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-04-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in EasyBlocks IPv6 Ver. 2.0.1 and earlier and Enterprise Ver. 2.0.1 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Affected configurations
• plathome easyblocks ipv6 firmware (<= 2.0.1)
• plathome easyblocks ipv6 enterprise firmware (<= 2.0.1)
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- https://jvn.jp/en/jp/JVN89224521/index.html Third Party Advisory
- https://www.plathome.co.jp/software/ipv6-enterprise-v2-0-2/ Release Notes, Vendor Advisory
- https://www.plathome.co.jp/software/ipv6-v2-0-2/ Release Notes, Vendor Advisory
- https://jvn.jp/en/jp/JVN89224521/index.html Third Party Advisory
- https://www.plathome.co.jp/software/ipv6-enterprise-v2-0-2/ Release Notes, Vendor Advisory
- https://www.plathome.co.jp/software/ipv6-v2-0-2/ Release Notes, Vendor Advisory