İçeriğe geç
Bilgi ve Teknoloji Uygulamada aç

Orta CVSS 6.5 PoC var

CVE-2025-67013: D0116s1ula-22454 Firmware: siteler arası istek sahteciliği (CSRF)

Yayın: · Güncelleme:

Açıklama (NVD)

The web management interface in ETL Systems Ltd DEXTRA Series ' Digital L-Band Distribution System v1.8 does not implement Cross-Site Request Forgery (CSRF) protection mechanisms (no tokens, no Origin/Referer validation) on critical configuration endpoints.

Özet bilgiler

Ürün
Etlsystems D0116s1ula-22454 Firmware
CVSS v3.1
6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
EPSS
%0,17 (yüzdelik 6)
CWE
CWE-352
Yama
Yok / bilinmiyor

Etkilenen sürümler

ÜrünBaşlangıçBitişDüzeltildi
etlsystems-d0116s1ula-22454-firmware1.81.8—
etlsystems-d0116s1uia-22474-firmware1.81.8—
etlsystems-c0401s1ula-22418-firmware1.81.8—
etlsystems-c0801s1ula-22420-firmware1.81.8—
etlsystems-c1601s1ula-22422-firmware1.81.8—
etlsystems-c0401s1ula-22455-firmware1.81.8—
etlsystems-c0801s1ula-22457-firmware1.81.8—
etlsystems-c1601s1ula-22459-firmware1.81.8—
etlsystems-c1601s1uia-22479-firmware1.81.8—
etlsystems-d0104d1ula-22411-firmware1.81.8—
etlsystems-d0108d1ula-22413-firmware1.81.8—
etlsystems-d0104d1ula-22451-firmware1.81.8—
etlsystems-d0108d1ula-22453-firmware1.81.8—
etlsystems-d0108d1uia-22473-firmware1.81.8—
etlsystems-c0401d1ula-22419-firmware1.81.8—
etlsystems-c0801d1ula-22421-firmware1.81.8—
etlsystems-c0401d1ula-22456-firmware1.81.8—
etlsystems-c0801d1ula-22458-firmware1.81.8—
etlsystems-c0401d1uia-22476-firmware1.81.8—
etlsystems-h0108d1ula-22431-firmware1.81.8—
etlsystems-h0104d1ula-22460-firmware1.81.8—
etlsystems-h0108d1ula-22461-firmware1.81.8—
etlsystems-d0104s1ula-22410-firmware1.81.8—
etlsystems-d0108s1ula-22412-firmware1.81.8—
etlsystems-d0116s1ula-22414-firmware1.81.8—
etlsystems-d0104s1ula-22450-firmware1.81.8—
etlsystems-d0108s1ula-22452-firmware1.81.8—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları