CVE-2020-10181 Sumavision EMR Cross-Site Request Forgery (CSRF)
An attacker can create arbitrary administrator users on Sumavision EMR devices via a crafted request, leading to full device compromise.
- Exploited in the wild
- Since 3 Nov 2021
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-10181?
CVE-2020-10181 is a critical vulnerability in n/a, published on 11 Mar 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of arbitrary users with elevated privileges (administrator) on a device, as demonstrated by a setString=new_user<*1*>administrator<*1*>123456 request.
Weakness: CWE-352
Which versions are affected by CVE-2020-10181?
It affects 1 product.
Products include Sumavision Enhanced Multimedia Router Firmware.
How do I fix CVE-2020-10181?
No fix has been published for CVE-2020-10181 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 3 May 2022.
Is CVE-2020-10181 being exploited?
Yes. Attackers have exploited CVE-2020-10181 in the wild since at least 3 Nov 2021.
Sources
Also known as GHSA-hx2x-p3w3-x6vh.