CVE-2020-24033 | BDVDB-2026-143639 Detail

Description#

An issue was discovered in fs.com S3900 24T4S 1.7.0 and earlier. The form does not have an authentication or token authentication mechanism that allows remote attackers to forge requests on behalf of a site administrator to change all settings including deleting users, creating new users with escalated privileges.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/M0NsTeRRR/S3900-24T4S-CSRF-vulnerability
https://github.com/M0NsTeRRR/CVE-2020-24033

Exploit#

No public exploit known

History#

Version 12020-10-22Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.