CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.4. It may be remotely exploitable. It may lead to a denial-of-service condition.
CVE
CVE-2024-26153
Severity
HIGH
CVSS
7.4
EPSS
0.17%
Original NVD Description
All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.9.19 are vulnerable to cross-site request forgery (CSRF). An external attacker with no access to the device can force the end user into submitting a "setconf" method request, not requiring any CSRF token, which can lead into denial of service on the device.
Related CVEs
Other vulnerabilities affecting the same vendor(s)