Vulnerabilities > Sumavision

DATE CVE VULNERABILITY TITLE RISK
2020-03-11 CVE-2020-10181 Cross-Site Request Forgery (CSRF) vulnerability in Sumavision Enhanced Multimedia Router Firmware 3.0.4.27
goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of arbitrary users with elevated privileges (administrator) on a device, as demonstrated by a setString=new_user<*1*>administrator<*1*>123456 request.
network
low complexity
sumavision CWE-352
critical
 9.8
9.8