CVE-2021-20636: CSRF
Cross-site request forgery (CSRF) vulnerability in LOGITEC LAN-W300N/PR5B allows remote attackers to hijack the authentication of administrators via a specially crafted URL. As a result, unintended operations to the device such as changes of the device settings may be conducted.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-20636?
CVE-2021-20636 is classified as a moderate severity vulnerability due to its ability to allow remote attackers to potentially hijack administrator authentication.
How does CVE-2021-20636 exploit the vulnerability?
CVE-2021-20636 exploits the vulnerability through a cross-site request forgery attack using a specially crafted URL that targets the admin session.
What are the potential impacts of CVE-2021-20636?
The potential impacts of CVE-2021-20636 include unauthorized changes to device settings and configuration by an attacker gaining administrator privileges.
What devices are affected by CVE-2021-20636?
CVE-2021-20636 affects LOGITEC LAN-W300N/PR5B devices running specific firmware versions.
How can I mitigate the risks associated with CVE-2021-20636?
To mitigate the risks associated with CVE-2021-20636, it is recommended to apply any available firmware updates from the manufacturer.