CVE-2025-66953: Upc2 Firmware: siteler arası istek sahteciliği (CSRF)

Açıklama (NVD)

CSRF vulnerability in narda miteq Uplink Power Contril Unit UPC2 v.1.17 allows a remote attacker to execute arbitrary code via the Web-based management interface and specifically the /system_setup.htm, /set_clock.htm, /receiver_setup.htm, /cal.htm?..., and /channel_setup.htm endpoints

Özet bilgiler

Ürün

Nardamiteq Upc2 Firmware

CVSS v3.1

8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

%0,30 (yüzdelik 23)

CWE

CWE-352

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• github.com
• www.nardamiteq.com
• github.com
• CWE-352