CVE-2023-2505
HIGHbirddog a300_firmware mini_firmware 4k_quad_firmware studio_r3_firmware - Cross-Site Request Forgery
Title source: llmDescription
The affected products have a CSRF vulnerability that could allow an attacker to execute code and upload malicious files.
References (2)
Core 2
Core References
Product
https://birddog.tv/downloads/
Third Party Advisory, US Government Resource
https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-11
Scores
CVSS v3
7.7
EPSS
0.0032
EPSS Percentile
23.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-352
Status
published
Products (5)
birddog/4k_quad_firmware
4.5.181
birddog/4k_quad_firmware
4.5.196
birddog/a300_firmware
3.4
birddog/mini_firmware
2.6.2
birddog/studio_r3_firmware
3.6.4
Published
May 22, 2023
Tracked Since
Feb 18, 2026