Exploitation Summary
EIP tracks 1 public exploit for CVE-2020-36908. PoCs published by LiquidWorm.
AI-analyzed exploit summary This exploit demonstrates a Cross-Site Request Forgery (CSRF) vulnerability in SnapGear Management Console SG560 v3.1.5, allowing an attacker to add a super user account via a malicious HTML form. The PoC includes a form that submits a POST request to the vulnerable endpoint, creating a new user with administrative privileges.
Description
SnapGear Management Console SG560 version 3.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft a malicious web page that automatically submits a form to create a new super user account with full administrative privileges when a logged-in user visits the page.
Exploits (1)
This exploit demonstrates a Cross-Site Request Forgery (CSRF) vulnerability in SnapGear Management Console SG560 v3.1.5, allowing an attacker to add a super user account via a malicious HTML form. The PoC includes a form that submits a POST request to the vulnerable endpoint, creating a new user with administrative privileges.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N