AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2017-11193

HIGH · CVSS 8.8 EPSS 0.56%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-07-12 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2017-11193
Severity
HIGH
CVSS
8.8
EPSS
0.56%

Original NVD Description

Pulse Connect Secure 8.3R1 has CSRF in diag.cgi. In the panel, the diag.cgi file is responsible for running commands such as ping, ping6, traceroute, traceroute6, nslookup, arp, and Portprobe. These functions do not have any protections against CSRF. That can allow an attacker to run these commands against any IP if they can get an admin to visit their malicious CSRF page.