CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-03-11
Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 Arbitrary Administrator Creation & CSRF Vulnerability (CVE-2020-10181) Technical Advisory
[Affected Scope] Sumavision Enhanced Multimedia Router (EMR) version 3.0.4.27 and potentially prior firmware versions.
[Impact] Unauthenticated remote attackers can create arbitrary accounts with administrative privileges via CSRF or direct HTTP requests, leading to complete device compromise.
[Mitigation] Restrict external access to the web management interface, deploy WAF rules to block malicious parameter patterns, and apply the latest secure firmware from the vendor.