CVE-2019-14481

MEDIUM

AdRem NetCrunch 10.6.0.4587 - Cross-Site Request Forgery in Web Client

Title source: llm

Description

AdRem NetCrunch 10.6.0.4587 has a Cross-Site Request Forgery (CSRF) vulnerability in the NetCrunch web client. Successful exploitation requires a logged-in user to open a malicious page and leads to account takeover.

References (2)

Core 2

Core References

Product x_refsource_misc

https://www.adremsoft.com/support/

Exploit, Third Party Advisory x_refsource_misc

https://compass-security.com/fileadmin/Research/Advisories/2020-15_CSNC-2019-016_AdRem_NetCrunch_Cross-Site_Request_Forgery_CSRF.txt

Scores

CVSS v3 5.4

EPSS 0.0044

EPSS Percentile 35.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Details

CWE

CWE-352

Status published

Products (1)

adremsoft/netcrunch 10.6.0.4587

Published Dec 16, 2020

Tracked Since Feb 18, 2026