Unrated severityNVD Advisory· Published Aug 17, 2022· Updated Aug 3, 2024
IPTIME NAS family CSRF vulnerability
CVE-2022-23765
Description
This vulnerability occured by sending a malicious POST request to a specific page while logged in random user from some family of IPTIME NAS. Remote attackers can steal root privileges by changing the password of the root through a POST request.
Affected products
1- Range: unspecified
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.krcert.or.kr/krcert/secNoticeView.domitrex_refsource_MISC
News mentions
0No linked articles in our index yet.