Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2021-47820

Ubee EVW327 - 'Enable Remote Access' Cross-Site Request Forgery (CSRF)

Description

Ubee EVW327 contains a cross-site request forgery vulnerability that allows attackers to enable remote access without user interaction. Attackers can craft a malicious webpage that automatically submits a form to change router remote access settings to port 8080 without the user's consent.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ubeeinteractive Ubee EVW327

  • EVW327affected

References