Published: 23/11/2022 Updated: 23/11/2022

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 0

A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2, Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote malicious user to conduct a cross site request forgery (CSRF) attack to enable syslog mode through ' /mgm_log_cfg.asp.' The system starts to log events, 'Remote' mode or 'Both' mode on "Syslog -- Configuration page" logs events and sends to remote syslog server IP and Port.

Vulnerable Product	Search on Vulmon	Subscribe to Product
optilinknetwork op-xt71000n_firmware 3.3.1-191028

INFORMATION DISCLOSURE :CSRF to enable syslog mode and send to remote syslog server IP and Port.

CVE-2020-23593 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V22"; & "FIRMWARE VERSION: OP_V331-191028" Found vulnerability in the "OPTILINK OP-XT71000N Hardware Version: V22 , Firmware Version: OP_V331-191028" allow an unauthenticated, remote attacker to conduct a cross site request forgery (CSRF) attack to

CWE-352 https://github.com/huzaifahussain98/CVE-2020-23593 https://nvd.nist.gov https://github.com/huzaifahussain98/CVE-2020-23593

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2020-23593

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect