Skip to content
OpenAdvisories
Unscored CVE-2020-25353 EUVD-2020-18040GHSA-3hvp-8gh4-hrx5

A server-side request forgery (SSRF) vulnerability in rConfig 3.9.5 has been fixed for 3.9.6. This vulnerability allowed remote authenticat…

Published Aug 20, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

A server-side request forgery (SSRF) vulnerability in rConfig 3.9.5 has been fixed for 3.9.6. This vulnerability allowed remote authenticated attackers to open a connection to the machine via the deviceIpAddr and connPort parameters.

References