CVE-2020-36908

MEDIUM

SnapGear Management Console SG560 3.1.5 - CSRF

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2020-36908. PoCs published by LiquidWorm.

AI-analyzed exploit summary This exploit demonstrates a Cross-Site Request Forgery (CSRF) vulnerability in SnapGear Management Console SG560 v3.1.5, allowing an attacker to add a super user account via a malicious HTML form. The PoC includes a form that submits a POST request to the vulnerable endpoint, creating a new user with administrative privileges.

Description

SnapGear Management Console SG560 version 3.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft a malicious web page that automatically submits a form to create a new super user account with full administrative privileges when a logged-in user visits the page.

Exploits (1)

exploitdb WORKING POC
by LiquidWorm · textwebappshardware
https://www.exploit-db.com/exploits/48554

This exploit demonstrates a Cross-Site Request Forgery (CSRF) vulnerability in SnapGear Management Console SG560 v3.1.5, allowing an attacker to add a super user account via a malicious HTML form. The PoC includes a form that submits a POST request to the vulnerable endpoint, creating a new user with administrative privileges.

Classification
Working Poc 100%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: SnapGear Management Console SG560 v3.1.5
No auth needed
Prerequisites: Victim must be authenticated and visit a malicious webpage
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5

Scores

CVSS v3 5.3
EPSS 0.0023
EPSS Percentile 13.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-352
Status published
Products (1)
securecomputing/snapgear_sg560_firmware 3.1.5
Published Jan 06, 2026
Tracked Since Feb 18, 2026