Sumavision vulnerabilities
Published CVEs affecting Sumavision products: 1 record(s), with severity, exploitation and fixes.
CVE-2020-10181
Critical · 9.8
KEV High · 62 CWE-352 Mar 11, 2020
Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability
goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of arbitrary users with elevated privileges (administrator) on a device, as demonstrated by a setString=new_user<*1*>administrator<*1*>123456 request.