CVE-2022-50804

HIGH

JM-DATA ONU JF511-TV <1.0.67 - CSRF

Title source: llm

Description

JM-DATA ONU JF511-TV version 1.0.67 is vulnerable to cross-site request forgery (CSRF) attacks, allowing attackers to perform administrative actions on behalf of authenticated users without their knowledge or consent.

References (6)

[Exploit, Third Party Advisory] https://cxsecurity.com/issue/WLB-2022060058

[Third Party Advisory] https://exchange.xforce.ibmcloud.com/vulnerabilities/229355

[Third Party Advisory] https://packetstormsecurity.com/files/167487/

[Product] https://www.jm-data.com/

[Third Party Advisory] https://www.vulncheck.com/advisories/jm-data-onu-jf-tv-cross-site-request-forgery-csrf-vulnerability

[Third Party Advisory] https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5708.php

Scores

CVSS v3 8.8

EPSS 0.0003

EPSS Percentile 10.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE

CWE-352

Status published

Affected Products (3)

jm-data/onu_jf511-tv_firmware

Timeline

Published Dec 30, 2025

Tracked Since Feb 18, 2026