Tasmota through 16.0.0, fixed in commit 1cb7ebc, contains a cross-site request forgery vulnerability that allows unauthenticated attackers to bypass…
Tasmota through 16.0.0, fixed in commit 1cb7ebc, contains a cross-site request forgery vulnerability that allows unauthenticated attackers to bypass Referer-based CSRF protection in HttpCheckPriviledgedAccess() by crafting a Referer header where the device hostname or IP appears as a substring immediately after http://.evil.com/. Attackers can lure an administrator on the device's network to a malicious page to issue arbitrary console commands and reconfigure Wi-Fi, MQTT, settings, or firmware on devices lacking a WebPassword.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Arendst
- Product
- Tasmota
- CVSS v3.1
- 7.5 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- Fix
- available
- Weakness
- CWE-352
- Exposure class
- OT / ICS
- NVD status
- Received
Why it ranks 35 (Notable)
- CVSS v3.1 7.5 high
- Product class: OT / ICS
- Fix available
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.