CVE-2018-13032 - ECESSA ShieldLink SL175EHQ 10.7.4 devices have CSRF to add superuser accounts via the cgi-bin/pl_web.cgi/util_configlogin_act URI

HIGH

ECESSA ShieldLink SL175EHQ 10.7.4 devices have CSRF to add superuser accounts via the cgi-bin/pl_web.cgi/util_configlogin_act URI

Published Jul 1, 2018

8.8

HIGH

CVSS 3.0

EPSS 2.25%

ECESSA ShieldLink SL175EHQ 10.7.4 devices have CSRF to add superuser accounts via the cgi-bin/pl_web.cgi/util_configlogin_act URI.

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

https://www.exploit-db.com/exploits/44938/
exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://www.exploit-db.com/exploits/44938/		exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jul 1, 2018

Updated Aug 5, 2024

Reserved Jul 1, 2018

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a