CVE-2023-25201

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-25201
Cross Site Request Forgery (CSRF) vulnerability in MultiTech Conduit AP MTCAP2-L4E1 MTCAP2-L4E1-868-042A v.6.0.0 allows a remote attacker to execute arbitrary code via a crafted script upload.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://herolab.usd.de/security-advisories/ Exploit Third Party Advisory
https://www.multitech.com Product
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:multitech:conduit_ap_mtcap2-l4e1-868-042a_firmware:6.0.0:*:*:*:*:*:*:*
cpe:2.3:h:multitech:conduit_ap_mtcap2-l4e1-868-042a:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:multitech:conduit_ap_mtcap2-l4e1_firmware:6.0.0:*:*:*:*:*:*:*
cpe:2.3:h:multitech:conduit_ap_mtcap2-l4e1:-:*:*:*:*:*:*:*
History

No history.

Information

Published : 2023-07-07 16:15

Updated : 2023-07-17 18:42

NVD link : CVE-2023-25201

Mitre link : CVE-2023-25201

CVE.ORG link : CVE-2023-25201

JSON object : View

Products Affected

multitech

  • conduit_ap_mtcap2-l4e1-868-042a_firmware
  • conduit_ap_mtcap2-l4e1
  • conduit_ap_mtcap2-l4e1-868-042a
  • conduit_ap_mtcap2-l4e1_firmware
CWE
CWE-352

Cross-Site Request Forgery (CSRF)